Skip to content
OpenAdvisories
High ELSA-2024-12552 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

Published Jul 23, 2024 · Updated Jul 23, 2024

Summary

[5.4.17-2136.333.5.1.el8]
- net/mlx5e: drop shorter ethernet frames (Manjunath Patil) [Orabug: 36660755]
- pci: add hotplug patch support for SOLIDIGM Aura10 AIC 0x025e:0x0b60 (Alan Adamson) [Orabug: 36836653]

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 kernel-uek-container 0:5.4.17-2136.333.5.1.el8
Oracle Linux · 8 kernel-uek-container-debug 0:5.4.17-2136.333.5.1.el8

Vulnerabilities 2

  • High 8.8

    tap: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path, which could cause a corrupted skb to be…

  • High 8.8

    tun: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which could cause a corrupted skb to be sent…