Summary
[5.14.0-284.25.1.0.1_2]
- Fix KVM: x86/mmu: Fix race condition in direct_page_fault [Orabug: 35673032] {CVE-2022-45869}
[5.14.0-284.25.1_2]
- KVM: x86/mmu: Fix race condition in direct_page_fault
- prlimit: do_prlimit needs to have a speculation check {CVE-2023-0458}
- x86/speculation: Allow enabling STIBP with legacy IBRS {CVE-2023-1998}
- ipvlan: Fix out of bounds caused by unclear skb->cb {CVE-2023-3090}
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt {CVE-2023-35788}
Fixed packages 27
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | bpftool | 0:7.0.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-abi-stablelists | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-core | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-cross-headers | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-debug | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-debug-core | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-debug-devel | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-debug-devel-matched | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-debug-modules | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-debug-modules-core | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-debug-modules-extra | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-debug-uki-virt | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-devel | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-devel-matched | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-doc | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-headers | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-modules | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-modules-core | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-modules-extra | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-tools | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-tools-libs | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-tools-libs-devel | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | kernel-uki-virt | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | perf | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | python3-perf | 0:5.14.0-284.25.1.0.1.el9_2 |
| Oracle Linux · 9 | rtla | 0:5.14.0-284.25.1.0.1.el9_2 |
Vulnerabilities 5
-
High 7.8
Out-of-bounds write in Linux kernel's ipvlan network driver
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is r…
-
High 7.8CVE-2023-35788 Public exploit
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an o…
-
Medium 5.6CVE-2023-1998 Public exploit
Spectre v2 SMT mitigations problem in Linux kernel
The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud provider, the kernel sti…
-
Medium 5.5
A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial o…
-
Medium 5.3
Spectre V1 Gadget in do_prlimit in the Linux Kernel
A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading…