Summary
[5.15.0-317.197.5.2]
- xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca) [Orabug: 39016261]
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca) [Orabug: 39016261]
- Revert 'xfrm: destroy xfrm_state synchronously on net exit path' (Sabrina Dubroca) [Orabug: 39016261]
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Kuniyuki Iwashima) [Orabug: 39016219] {CVE-2025-40149}
- net: Add locking to protect skb->dev access in ip_output (Sharath Chandra Vurukala) [Orabug: 39016219]
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek-container | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek64k | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek64k-core | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek64k-devel | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules | 0:5.15.0-317.197.5.2.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules-extra | 0:5.15.0-317.197.5.2.el9uek |
Vulnerabilities 2
-
High 7.8
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
In the Linux kernel, the following vulnerability has been resolved: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). get_netdev_for_sock() is called during setsockopt(), so not under RCU. Using sk_dst_get(sk)->dev could trigger UAF. Let's u…
-
Unscored —
xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
In the Linux kernel, the following vulnerability has been resolved: xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added In commit b441cf3f8c4b ("xfrm: delete x->tunnel as we delete x"), I missed the case where state creat…