Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2024-12255 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

Published Apr 1, 2024 · Updated Apr 1, 2024

Ecosystem: Oracle Linux

Summary

[5.15.0-204.147.6.3]
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36464807] {CVE-2024-1086}

Fixed packages 14

ReleasePackageFixed in
Oracle Linux · 8 bpftool 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek-container 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek-container-debug 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek-core 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek-debug 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek-debug-core 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek-debug-devel 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek-debug-modules 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek-debug-modules-extra 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek-devel 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek-doc 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek-modules 0:5.15.0-204.147.6.3.el9uek
Oracle Linux · 8 kernel-uek-modules-extra 0:5.15.0-204.147.6.3.el9uek

Vulnerabilities 1

  • High 7.8
    CVE-2024-1086 Exploited · Ransomware Public exploit EPSS 28%

    Use-after-free in Linux kernel's netfilter: nf_tables component

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slo…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV May 30, 2024