Summary
[4.14.35-2047.516.2.1]
- rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry) [Orabug: 33981856] {CVE-2022-21385}
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.14.35-2047.516.2.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.14.35-2047.516.2.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.14.35-2047.516.2.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.14.35-2047.516.2.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.14.35-2047.516.2.1.el7uek |
| Oracle Linux · 7 | kernel-uek-headers | 0:4.14.35-2047.516.2.1.el7uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:4.14.35-2047.516.2.1.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs | 0:4.14.35-2047.516.2.1.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs-devel | 0:4.14.35-2047.516.2.1.el7uek |
| Oracle Linux · 7 | perf | 0:4.14.35-2047.516.2.1.el7uek |
| Oracle Linux · 7 | python-perf | 0:4.14.35-2047.516.2.1.el7uek |
Vulnerabilities 1
-
Medium 6.2
A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Ba…