Skip to content
OpenAdvisories
High ELSA-2024-12546 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

Published Jul 23, 2024 · Updated Jul 23, 2024

Summary

[5.15.0-208.159.3.2]
- net/mlx5e: drop shorter ethernet frames (Manjunath Patil) [Orabug: 36660755]

Fixed packages 14

ReleasePackageFixed in
Oracle Linux · 8 bpftool 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek-container 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek-container-debug 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek-core 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek-debug 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek-debug-core 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek-debug-devel 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek-debug-modules 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek-debug-modules-extra 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek-devel 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek-doc 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek-modules 0:5.15.0-208.159.3.2.el9uek
Oracle Linux · 8 kernel-uek-modules-extra 0:5.15.0-208.159.3.2.el9uek

Vulnerabilities 2

  • High 8.8

    tap: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path, which could cause a corrupted skb to be…

  • High 8.8

    tun: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which could cause a corrupted skb to be sent…