Summary
[3.10.0-1160.119.1.0.9.el7.OL7]
- netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) {CVE-2024-53141} [Orabug: 37964173]
- Update OL SB certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985797]
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | bpftool | 0:3.10.0-1160.119.1.0.9.el7 |
| Oracle Linux · 7 | kernel | 0:3.10.0-1160.119.1.0.9.el7 |
| Oracle Linux · 7 | kernel-abi-whitelists | 0:3.10.0-1160.119.1.0.9.el7 |
| Oracle Linux · 7 | kernel-debug | 0:3.10.0-1160.119.1.0.9.el7 |
| Oracle Linux · 7 | kernel-debug-devel | 0:3.10.0-1160.119.1.0.9.el7 |
| Oracle Linux · 7 | kernel-devel | 0:3.10.0-1160.119.1.0.9.el7 |
| Oracle Linux · 7 | kernel-doc | 0:3.10.0-1160.119.1.0.9.el7 |
| Oracle Linux · 7 | kernel-headers | 0:3.10.0-1160.119.1.0.9.el7 |
| Oracle Linux · 7 | kernel-tools | 0:3.10.0-1160.119.1.0.9.el7 |
| Oracle Linux · 7 | kernel-tools-libs | 0:3.10.0-1160.119.1.0.9.el7 |
| Oracle Linux · 7 | kernel-tools-libs-devel | 0:3.10.0-1160.119.1.0.9.el7 |
| Oracle Linux · 7 | perf | 0:3.10.0-1160.119.1.0.9.el7 |
| Oracle Linux · 7 | python-perf | 0:3.10.0-1160.119.1.0.9.el7 |
Vulnerabilities 1
-
High 7.8
netfilter: ipset: add missing range check in bitmap_ip_uadt
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip and ip_to are slightly swapped. Therefore…