Summary
[5.4.17-2136.336.5.3.1.el8uek]
- mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds) [Orabug: 37311329] {CVE-2024-47674}
- mm: add remap_pfn_range_notrack (Christoph Hellwig) [Orabug: 37311329] {CVE-2024-47674}
- mm/memory.c: make remap_pfn_range() reject unaligned addr (Alex Zhang) [Orabug: 37311329] {CVE-2024-47674}
- mm: fix ambiguous comments for better code readability (chenqiwu) [Orabug: 37311329] {CVE-2024-47674}
- mm: clarify a confusing comment for remap_pfn_range() (WANG Wenhu) [Orabug: 37311329] {CVE-2024-47674}
- devlink: fix possible use-after-free and memory leaks in devlink_init() (Vasiliy Kovalev) [Orabug: 37311325] {CVE-2024-26734}
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:5.4.17-2136.336.5.3.1.el8uek |
| Oracle Linux · 7 | kernel-uek-container | 0:5.4.17-2136.336.5.3.1.el8uek |
| Oracle Linux · 7 | kernel-uek-container-debug | 0:5.4.17-2136.336.5.3.1.el8uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:5.4.17-2136.336.5.3.1.el8uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:5.4.17-2136.336.5.3.1.el8uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:5.4.17-2136.336.5.3.1.el8uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:5.4.17-2136.336.5.3.1.el8uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:5.4.17-2136.336.5.3.1.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs | 0:5.4.17-2136.336.5.3.1.el7uek |
| Oracle Linux · 7 | perf | 0:5.4.17-2136.336.5.3.1.el7uek |
| Oracle Linux · 7 | python-perf | 0:5.4.17-2136.336.5.3.1.el7uek |
Vulnerabilities 2
-
High 7.8
mm: avoid leaving partial pfn mappings around in error case
In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated wi…
-
High 7.0
devlink: fix possible use-after-free and memory leaks in devlink_init()
In the Linux kernel, the following vulnerability has been resolved: devlink: fix possible use-after-free and memory leaks in devlink_init() The pernet operations structure for the subsystem must be registered before registering the generic netlink family. Mak…