Summary
[5.4.17-2136.341.3.3]
- ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 37727037] {CVE-2024-39494}
[5.4.17-2136.341.3.2]
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam) [Orabug: 37707634] {CVE-2024-57892}
- ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi) [Orabug: 37707634]
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:5.4.17-2136.341.3.3.el8uek |
| Oracle Linux · 7 | kernel-uek-container | 0:5.4.17-2136.341.3.3.el8uek |
| Oracle Linux · 7 | kernel-uek-container-debug | 0:5.4.17-2136.341.3.3.el8uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:5.4.17-2136.341.3.3.el8uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:5.4.17-2136.341.3.3.el8uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:5.4.17-2136.341.3.3.el8uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:5.4.17-2136.341.3.3.el8uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:5.4.17-2136.341.3.3.el7uek |
Vulnerabilities 2
-
High 7.8
ima: Fix use-after-free on a dentry's dname.name
In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's dname.name ->d_name.name can change on rename and the earlier value can be freed; there are conditions sufficient to stabilize it (->d_lock on dentry, ->…
-
High 7.8
ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv When mounting ocfs2 and then remounting it as read-only, a slab-use-after-free occurs after the user uses a syscall to quota_ge…