Summary
[5.15.0-1.43.4.2]
- rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry) [Orabug: 33981854] {CVE-2022-21385}
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-1.43.4.2.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-1.43.4.2.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-1.43.4.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-1.43.4.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-1.43.4.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-1.43.4.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-1.43.4.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-1.43.4.2.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-1.43.4.2.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-1.43.4.2.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-1.43.4.2.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-1.43.4.2.el9uek |
Vulnerabilities 1
-
Medium 6.2
A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Ba…