High ELSA-2022-9727 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Aug 19, 2022 · Updated Aug 19, 2022

Ecosystem: Oracle Linux

Summary

[5.4.17-2136.310.7.1]
- rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry) [Orabug: 33981855] {CVE-2022-21385}

Fixed packages 9

Release	Package	Fixed in
Oracle Linux · 7	kernel-uek	0:5.4.17-2136.310.7.1.el8uek
Oracle Linux · 7	kernel-uek-debug	0:5.4.17-2136.310.7.1.el8uek
Oracle Linux · 7	kernel-uek-debug-devel	0:5.4.17-2136.310.7.1.el8uek
Oracle Linux · 7	kernel-uek-devel	0:5.4.17-2136.310.7.1.el8uek
Oracle Linux · 7	kernel-uek-doc	0:5.4.17-2136.310.7.1.el8uek
Oracle Linux · 7	kernel-uek-tools	0:5.4.17-2136.310.7.1.el7uek
Oracle Linux · 7	kernel-uek-tools-libs	0:5.4.17-2136.310.7.1.el7uek
Oracle Linux · 7	perf	0:5.4.17-2136.310.7.1.el7uek
Oracle Linux · 7	python-perf	0:5.4.17-2136.310.7.1.el7uek

Vulnerabilities 1

Medium 6.2

CVE-2022-21385

A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Ba…

Oracle Oracle Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Aug 29, 2022