Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2024-12257 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Apr 2, 2024 · Updated Apr 2, 2024

Ecosystem: Oracle Linux

Summary

[4.14.35-2047.534.3.1]
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36251145] {CVE-2024-1086}

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.14.35-2047.534.3.1.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.14.35-2047.534.3.1.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.14.35-2047.534.3.1.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.14.35-2047.534.3.1.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.14.35-2047.534.3.1.el7uek
Oracle Linux · 7 kernel-uek-headers 0:4.14.35-2047.534.3.1.el7uek
Oracle Linux · 7 kernel-uek-tools 0:4.14.35-2047.534.3.1.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:4.14.35-2047.534.3.1.el7uek
Oracle Linux · 7 kernel-uek-tools-libs-devel 0:4.14.35-2047.534.3.1.el7uek
Oracle Linux · 7 perf 0:4.14.35-2047.534.3.1.el7uek
Oracle Linux · 7 python-perf 0:4.14.35-2047.534.3.1.el7uek

Vulnerabilities 1

  • High 7.8
    CVE-2024-1086 Exploited · Ransomware Public exploit EPSS 28%

    Use-after-free in Linux kernel's netfilter: nf_tables component

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slo…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV May 30, 2024