Summary
[5.15.0-304.171.4.3]
- NFSD: Limit the number of concurrent async COPY operations (Chuck Lever) [Orabug: 37516381] {CVE-2024-49974}
- NFSD: Async COPY result needs to return a write verifier (Chuck Lever) [Orabug: 37516381] {CVE-2024-49974}
- security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [Orabug: 37516370] {CVE-2024-50301}
- macsec: Fix use-after-free while sending the offloading packet (Jianbo Liu) [Orabug: 37516375] {CVE-2024-50261}
[5.15.0-304.171.4.2]
- PCI: Fix pci_enable_acs() support for the ACS quirks (Jason Gunthorpe) [Orabug: 37492139]
- PCI: Clear Secondary Status errors after enumeration (Vidya Sagar) [Orabug: 37492139]
- PCI/AER: Configure ECRC only if AER is native (Vidya Sagar) [Orabug: 37492139]
- PCI: Extend ACS configurability (Vidya Sagar) [Orabug: 37492139]
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek-container | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-304.171.4.3.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-304.171.4.3.el9uek |
Vulnerabilities 3
-
High 7.8
macsec: Fix use-after-free while sending the offloading packet
In the Linux kernel, the following vulnerability has been resolved: macsec: Fix use-after-free while sending the offloading packet KASAN reports the following UAF. The metadata_dst, which is used to store the SCI value for macsec offload, is already freed by …
-
High 7.8
security/keys: fix slab-out-of-bounds in key_task_permission
In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN reports an out of bounds read: BUG: KASAN: slab-out-of-bounds in __kuid_val include/linux/uidgid.h:36 BUG: KASAN: slab-out-o…
-
Unscored —
NFSD: Limit the number of concurrent async COPY operations
In the Linux kernel, the following vulnerability has been resolved: NFSD: Limit the number of concurrent async COPY operations Nothing appears to limit the number of concurrent async COPY operations that clients can start. In addition, AFAICT each async COPY …