Summary
[5.15.0-326.222.4.1]
- Fix TSA microcode check for ZEN5 (Dave Kleikamp) [Orabug: 40172717] {CVE-2024-36350} {CVE-2024-36357} {CVE-2026-0004}
- Fix Zen5 TSA (Borislav Petkov (AMD)) [Orabug: 40172717] {CVE-2024-36350} {CVE-2024-36357} {CVE-2026-0004}
- iommu/amd: Force device table to maximum size (Suravee Suthikulpanit) [Orabug: 40172717] {CVE-2024-21963}
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek-container | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek64k | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek64k-core | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek64k-devel | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules | 0:5.15.0-326.222.4.1.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules-extra | 0:5.15.0-326.222.4.1.el9uek |
Vulnerabilities 4
-
Medium 6.0
An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and pot…
-
Medium 5.7
A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on th…
-
Medium 5.6
A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, po…
-
Medium 5.6
A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potent…