High ELSA-2023-12803 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Sep 16, 2023 · Updated Sep 16, 2023

Ecosystem: Oracle Linux

Summary

[5.4.17-2136.323.8.1]
- rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713696] {CVE-2023-22024}

Fixed packages 9

Release	Package	Fixed in
Oracle Linux · 7	kernel-uek	0:5.4.17-2136.323.8.1.el8uek
Oracle Linux · 7	kernel-uek-debug	0:5.4.17-2136.323.8.1.el8uek
Oracle Linux · 7	kernel-uek-debug-devel	0:5.4.17-2136.323.8.1.el8uek
Oracle Linux · 7	kernel-uek-devel	0:5.4.17-2136.323.8.1.el8uek
Oracle Linux · 7	kernel-uek-doc	0:5.4.17-2136.323.8.1.el8uek
Oracle Linux · 7	kernel-uek-tools	0:5.4.17-2136.323.8.1.el7uek
Oracle Linux · 7	kernel-uek-tools-libs	0:5.4.17-2136.323.8.1.el7uek
Oracle Linux · 7	perf	0:5.4.17-2136.323.8.1.el7uek
Oracle Linux · 7	python-perf	0:5.4.17-2136.323.8.1.el7uek

Vulnerabilities 1

Medium 5.5

CVE-2023-22024

In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS…

Oracle Oracle Linux Oracle VM Linux

Sep 20, 2023