Skip to content
OpenAdvisories
High ELSA-2024-12548 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Jul 23, 2024 · Updated Jul 23, 2024

Summary

[4.14.35-2047.538.5.1]
- net/mlx5e: drop shorter ethernet frames (Manjunath Patil) [Orabug: 36660755]

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.14.35-2047.538.5.1.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.14.35-2047.538.5.1.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.14.35-2047.538.5.1.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.14.35-2047.538.5.1.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.14.35-2047.538.5.1.el7uek
Oracle Linux · 7 kernel-uek-headers 0:4.14.35-2047.538.5.1.el7uek
Oracle Linux · 7 kernel-uek-tools 0:4.14.35-2047.538.5.1.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:4.14.35-2047.538.5.1.el7uek
Oracle Linux · 7 kernel-uek-tools-libs-devel 0:4.14.35-2047.538.5.1.el7uek
Oracle Linux · 7 perf 0:4.14.35-2047.538.5.1.el7uek
Oracle Linux · 7 python-perf 0:4.14.35-2047.538.5.1.el7uek

Vulnerabilities 2

  • High 8.8

    tap: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path, which could cause a corrupted skb to be…

  • High 8.8

    tun: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which could cause a corrupted skb to be sent…