Skip to content
OpenAdvisories
High ELSA-2024-12713 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

Published Oct 4, 2024 · Updated Oct 4, 2024

Summary

[5.15.0-300.163.18.1]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37132350]

Fixed packages 14

ReleasePackageFixed in
Oracle Linux · 8 bpftool 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek-container 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek-container-debug 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek-core 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek-debug 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek-debug-core 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek-debug-devel 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek-debug-modules 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek-debug-modules-extra 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek-devel 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek-doc 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek-modules 0:5.15.0-300.163.18.1.el9uek
Oracle Linux · 8 kernel-uek-modules-extra 0:5.15.0-300.163.18.1.el9uek

Vulnerabilities 1

  • Unscored —

    vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()

    In the Linux kernel, the following vulnerability has been resolved: vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() Since commit 3f8ca2e115e5 ("vhost/scsi: Extract common handling code from control queue handler") a null pointer dereference bug can b…