Summary
- [5.14.0-362.13.0.1_3.OL9]
- cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) (Steve French) {CVE-2023-1192}
- fs/smb/client: Reset password pointer to NULL (Quang Le) (Steve French) {CVE-2023-5345}
- igb: set max size RX buffer when store bad packet is enabled (Tony Nguyen) (David S. Miller) {CVE-2023-45871}
- [5.14.0-362.8.1_3.OL9]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Disable unified kernel image package build
- Add Oracle Linux IMA certificates
- 5.14.0
- Debranding patches copied from Rocky Linux (Louis Abel and Sherif Nagy from RESF)
Fixed packages 25
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | bpftool | 0:7.2.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-abi-stablelists | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-core | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-cross-headers | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-debug | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-debug-core | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-debug-devel | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-debug-devel-matched | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-debug-modules | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-debug-modules-core | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-debug-modules-extra | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-devel | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-devel-matched | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-doc | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-headers | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-modules | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-modules-core | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-modules-extra | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-tools | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-tools-libs | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | kernel-tools-libs-devel | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | perf | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | python3-perf | 0:5.14.0-362.13.0.1.el9_3 |
| Oracle Linux · 9 | rtla | 0:5.14.0-362.13.0.1.el9_3 |
Vulnerabilities 3
-
High 7.8
Use-after-free in Linux kernel's fs/smb/client component
A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead…
-
Medium 6.5
Use-after-free in smb2_is_status_io_timeout()
A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses …
-
Unscored —
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3…