Summary
[4.1.12-124.80.1]
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) [Orabug: 35814478] {CVE-2023-40283}
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35814297] {CVE-2023-4208}
- RDMA/core: net: fix kernel NULL error (Zhu Yanjun) [Orabug: 35723252]
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.80.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.80.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.80.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.80.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.80.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.80.1.el7uek |
Vulnerabilities 2
-
High 7.8
An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is…
-
High 7.8
Use-after-free in Linux kernel's net/sched: cls_u32 component
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of …