Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2024-12256 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Apr 1, 2024 · Updated Apr 1, 2024

Ecosystem: Oracle Linux

Summary

[5.4.17-2136.329.3.2]
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36465920] {CVE-2024-1086}

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:5.4.17-2136.329.3.2.el8uek
Oracle Linux · 7 kernel-uek-debug 0:5.4.17-2136.329.3.2.el8uek
Oracle Linux · 7 kernel-uek-debug-devel 0:5.4.17-2136.329.3.2.el8uek
Oracle Linux · 7 kernel-uek-devel 0:5.4.17-2136.329.3.2.el8uek
Oracle Linux · 7 kernel-uek-doc 0:5.4.17-2136.329.3.2.el8uek
Oracle Linux · 7 kernel-uek-tools 0:5.4.17-2136.329.3.2.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:5.4.17-2136.329.3.2.el7uek
Oracle Linux · 7 perf 0:5.4.17-2136.329.3.2.el7uek
Oracle Linux · 7 python-perf 0:5.4.17-2136.329.3.2.el7uek

Vulnerabilities 1

  • High 7.8
    CVE-2024-1086 Exploited · Ransomware Public exploit EPSS 28%

    Use-after-free in Linux kernel's netfilter: nf_tables component

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slo…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV May 30, 2024