Skip to content
OpenAdvisories
High ELSA-2024-12583 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Aug 12, 2024 · Updated Aug 12, 2024

Summary

[4.14.35-2047.539.5]
- Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (Jan Kara)
- net/mlx5e: drop shorter ethernet frames (Manjunath Patil) [Orabug: 36879158] {CVE-2024-41090} {CVE-2024-41091}

[4.14.35-2047.539.4]
- Fix parsing error in UEK5 kernel-uek-spec (Yifei Liu) [Orabug: 36847179]

[4.14.35-2047.539.3]
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka)
- nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka)
- nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa)
- vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)
- speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter)
- rds/ib: decrement ib_rx_total_incs after releasing associated cache (Arumugam Kolappan) [Orabug: 36760267]
- rds/rdma: Send info to userspace, even if connnection is down. (Juan Garcia) [Orabug: 36529474]

[4.14.35-2047.539.2]
- rds/rdma: Clear rds_info_socket before use (Juan Garcia) [Orabug: 36613108]

[4.14.35-2047.539.1]
- xfs: make sure sb_fdblocks is non-negative (Wengang Wang) [Orabug: 36759719]
- xfs: fix sb write verify for lazysbcount (Wengang Wang) [Orabug: 36759719]
- rds/rdma: Track rds_message in send, retrans and recv queue (Juan Garcia) [Orabug: 36529577]

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.14.35-2047.539.5.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.14.35-2047.539.5.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.14.35-2047.539.5.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.14.35-2047.539.5.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.14.35-2047.539.5.el7uek
Oracle Linux · 7 kernel-uek-headers 0:4.14.35-2047.539.5.el7uek
Oracle Linux · 7 kernel-uek-tools 0:4.14.35-2047.539.5.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:4.14.35-2047.539.5.el7uek
Oracle Linux · 7 kernel-uek-tools-libs-devel 0:4.14.35-2047.539.5.el7uek
Oracle Linux · 7 perf 0:4.14.35-2047.539.5.el7uek
Oracle Linux · 7 python-perf 0:4.14.35-2047.539.5.el7uek

Vulnerabilities 2

  • High 8.8

    tap: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path, which could cause a corrupted skb to be…

  • High 8.8

    tun: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which could cause a corrupted skb to be sent…