High ELSA-2023-12800 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Sep 16, 2023 · Updated Sep 16, 2023

Ecosystem: Oracle Linux

Summary

[4.1.12-124.78.4.1]
- rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35741584] {CVE-2023-22024}

Fixed packages 6

Release	Package	Fixed in
Oracle Linux · 7	kernel-uek	0:4.1.12-124.78.4.1.el7uek
Oracle Linux · 7	kernel-uek-debug	0:4.1.12-124.78.4.1.el7uek
Oracle Linux · 7	kernel-uek-debug-devel	0:4.1.12-124.78.4.1.el7uek
Oracle Linux · 7	kernel-uek-devel	0:4.1.12-124.78.4.1.el7uek
Oracle Linux · 7	kernel-uek-doc	0:4.1.12-124.78.4.1.el7uek
Oracle Linux · 7	kernel-uek-firmware	0:4.1.12-124.78.4.1.el7uek

Vulnerabilities 1

Medium 5.5

CVE-2023-22024

In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS…

Oracle Oracle Linux Oracle VM Linux

Sep 20, 2023