Summary
- [5.14.0-362.8.1_3.OL9]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Disable unified kernel image package build
- Add Oracle Linux IMA certificates
[5.14.0-362.8.1_3]
- Revert 'cnic: don't pass bogus GFP_ flags to dma_alloc_coherent' (Chris Leech) [RHEL-2542]
- Revert 'dma-mapping: reject __GFP_COMP in dma_alloc_attrs' (Chris Leech) [RHEL-2542]
[5.14.0-362.7.1_3]
- drm/amd: flush any delayed gfxoff on suspend entry (Mika Penttila) [2232662]
- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (Mika Penttila) [2232662]
- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (Mika Penttila) [2232662]
- Revert 'net/mlx5e: Switch to using napi_build_skb()' (Mohammad Kabat) [RHEL-1267]
[5.14.0-362.6.1_3]
- kabi: enable check-kabi (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol zlib_inflate_workspacesize to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol zlib_inflateInit2 to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol zlib_inflateEnd to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol zlib_inflate to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol zalloc_cpumask_var to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol yield to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xz_dec_run to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xz_dec_init to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xz_dec_end to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xa_store to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xas_find to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xa_set_mark to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xa_load to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __xa_insert to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xa_get_mark to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xa_find_after to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xa_find to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xa_erase to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xa_destroy to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol xa_clear_mark to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __xa_alloc_cyclic to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __xa_alloc to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol x86_spec_ctrl_base to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_return_thunk to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_rax to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_r9 to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_r11 to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol x86_cpu_to_apicid to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __write_overflow_field to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __warn_printk to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __wake_up to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol wait_for_completion_timeout to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol wait_for_completion_interruptible to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol wait_for_completion to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vzalloc to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vsprintf to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vsnprintf to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vprintk to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vm_zone_stat to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vm_munmap to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vm_event_states to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vmemmap_base to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vmalloc_to_page to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vmalloc_node to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vmalloc_base to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vmalloc_32 to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol vmalloc to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __vmalloc to stablelist (Cestmir Kalina) [RHEL-8864]
- kabi: add symbol __virt_addr_valid to stablelist (Cestmir Kalina) [RHEL-886
Fixed packages 27
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | bpftool | 0:7.2.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-abi-stablelists | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-core | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-cross-headers | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-debug | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-debug-core | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-debug-devel | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-debug-devel-matched | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-debug-modules | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-debug-modules-core | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-debug-modules-extra | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-devel | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-devel-matched | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-doc | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-headers | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-modules | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-modules-core | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-modules-extra | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-tools | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-tools-libs | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | kernel-tools-libs-devel | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | libperf | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | perf | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | python3-perf | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | rtla | 0:5.14.0-362.8.1.el9_3 |
| Oracle Linux · 9 | rv | 0:5.14.0-362.8.1.el9_3 |
Vulnerabilities 41
-
High 8.2
Kernel: ebpf: insufficient stack type checks in dynptr
An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAP_BPF …
-
High 7.8
A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations s…
-
High 7.8CVE-2023-3609 Public exploit
Use-after-free in Linux kernel's net/sched: cls_u32 component
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the refe…
-
High 7.8
Use-after-free in Linux kernel's net/sched: cls_route component
A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local privilege escalation. When route4_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instanc…
-
High 7.8
Use-after-free in Linux kernel's net/sched: cls_fw component
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. When fw_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of th…
-
High 7.8
Use-after-free in Linux kernel's net/sched: cls_u32 component
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. When u32_change() is called on an existing filter, the whole tcf_result struct is always copied into the new instance of …
-
High 7.1
A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel.…
-
High 7.1
A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. Thi…
-
High 7.1
An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c …
-
High 7.0
Kernel: use after free bug in btsdio_remove due to race condition
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a race problem which leads to a UAF on hdev devices.
-
Medium 6.8
A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconn…
-
Medium 6.7
Kernel: vmwgfx: race condition leading to information disclosure vulnerability
A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to…
-
Medium 6.7
Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects
A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which m…
-
Medium 6.6
A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a…
-
Medium 6.5
Information exposure through microarchitectural state after transient execution in certain vector execution units for s…
-
Medium 6.5
An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency…
-
Medium 6.4
The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/e…
-
Medium 6.3
There is an UAF vulnerability in vmwgfx driver
A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the…
-
Medium 6.3
There is an UAF vulnerability in vmwgfx driver
A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account …
-
Medium 6.3
A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux K…
-
Medium 6.0
Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry
A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging …
-
Medium 5.5
A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the…
-
Medium 5.5
A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a us…
-
Medium 5.5
A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion …
-
Medium 5.5
A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the s…
-
Medium 5.5
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height gr…
-
Medium 5.5
A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a…
-
Medium 5.5
Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel …
-
Medium 5.5
Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, lea…
-
Medium 5.5
Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid
A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is t…
-
Medium 5.3
Linux Kernel Driver memory.c use after free
A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver Handler. The manipulation leads to use after free. It is possible to launch the attack remotely. …
-
Medium 5.3
Linux Kernel BPF r8152.c intr_callback logging of excessive data
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The att…
-
Medium 5.3
Sev-es / sev-snp vmgexit double fetch vulnerability
A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the `VMGEXIT` handler recursively. If an attacker…
-
Medium 5.1
Info Leak in l2cap_core in the Linux Kernel
There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f…
-
Medium 4.7
In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registe…
-
Medium 4.6
Linux Kernel Bluetooth l1oip_core.c del_timer use after free
A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function del_timer of the file drivers/isdn/mISDN/l1oip_core.c of the component Bluetooth. The manipulation leads to use after free. It is recomme…
-
Low 3.3
A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessin…
-
Unscored —CVE-2023-1206 Public exploit
A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a use…
-
Unscored —
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file …
-
Unscored —CVE-2023-35825 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3141. Reason: This candidate is a reservation duplicate of CVE-2…
-
Unscored —
** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record i…