Summary
[5.4.17-2136.309.5]
- lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34386637] {CVE-2022-21505}
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:5.4.17-2136.309.5.el8uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:5.4.17-2136.309.5.el8uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:5.4.17-2136.309.5.el8uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:5.4.17-2136.309.5.el8uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:5.4.17-2136.309.5.el8uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:5.4.17-2136.309.5.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs | 0:5.4.17-2136.309.5.el7uek |
| Oracle Linux · 7 | perf | 0:5.4.17-2136.309.5.el7uek |
| Oracle Linux · 7 | python-perf | 0:5.4.17-2136.309.5.el7uek |
Vulnerabilities 1
-
Medium 6.7
In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kex…