Summary
[3.10.0-1160.119.1.0.10]
- net: atlantic: fix aq_vec index out of range error (Chia-Lin Kao) {CVE-2022-50066} [Orabug: 38201271]
- net: atm: fix use after free in lec_send() (Dan Carpenter) {CVE-2025-22004} [Orabug: 38201271]
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | bpftool | 0:3.10.0-1160.119.1.0.10.el7 |
| Oracle Linux · 7 | kernel | 0:3.10.0-1160.119.1.0.10.el7 |
| Oracle Linux · 7 | kernel-abi-whitelists | 0:3.10.0-1160.119.1.0.10.el7 |
| Oracle Linux · 7 | kernel-debug | 0:3.10.0-1160.119.1.0.10.el7 |
| Oracle Linux · 7 | kernel-debug-devel | 0:3.10.0-1160.119.1.0.10.el7 |
| Oracle Linux · 7 | kernel-devel | 0:3.10.0-1160.119.1.0.10.el7 |
| Oracle Linux · 7 | kernel-doc | 0:3.10.0-1160.119.1.0.10.el7 |
| Oracle Linux · 7 | kernel-headers | 0:3.10.0-1160.119.1.0.10.el7 |
| Oracle Linux · 7 | kernel-tools | 0:3.10.0-1160.119.1.0.10.el7 |
| Oracle Linux · 7 | kernel-tools-libs | 0:3.10.0-1160.119.1.0.10.el7 |
| Oracle Linux · 7 | kernel-tools-libs-devel | 0:3.10.0-1160.119.1.0.10.el7 |
| Oracle Linux · 7 | perf | 0:3.10.0-1160.119.1.0.10.el7 |
| Oracle Linux · 7 | python-perf | 0:3.10.0-1160.119.1.0.10.el7 |
Vulnerabilities 2
-
High 8.6
net: atm: fix use after free in lec_send()
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.
-
Unscored —
net: atlantic: fix aq_vec index out of range error
In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix aq_vec index out of range error The final update statement of the for loop exceeds the array range, the dereference of self->aq_vec[i] is not checked and then leads to the …