Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Oracle Linux 6 ELSA-2023-12842 Critical Kernel Update for Security

oracle
Calendar Grey October 3, 2023
Oracle Linux Logo Esm H88
The latest Oracle Linux updates tagged as ELSA-2023-12842 aim to resolve significant kernel vulnerabilities while boosting system security. Explore the updates today!
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:

Summary

[4.1.12-124.79.2] - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35814273] {CVE-2023-4206} - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) [Orabug: 35636291] {CVE-2023-3611} - rds: Fix lack of reentrancy for connection reset with dst addr zero (HÃ¥kon Bugge) [Orabug: 35741584] [Orabug: 35818110] {CVE-2023-22024} [4.1.12-124.79.1] - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) [Orabug: 35754509] {CVE-2023-3772} - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu) [Orabug: 35732892] {CVE-2023-4459} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu) [Orabug: 35732764] {CVE-2023-4387} - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) [Orabug: 35636313] {CVE-2023-3776} - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) ...

Read the Full Advisory

SRPMs

x86_64

kernel-uek-doc-4.1.12-124.79.2.el6uek.noarch.rpm kernel-uek-firmware-4.1.12-124.79.2.el6uek.noarch.rpm kernel-uek-4.1.12-124.79.2.el6uek.x86_64.rpm kernel-uek-devel-4.1.12-124.79.2.el6uek.x86_64.rpm kernel-uek-debug-4.1.12-124.79.2.el6uek.x86_64.rpm kernel-uek-debug-devel-4.1.12-124.79.2.el6uek.x86_64.rpm

aarch64

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2022-34918 CVE-2023-2513 CVE-2023-4387 CVE-2023-22024 CVE-2023-3772 CVE-2023-35001 CVE-2023-4206 CVE-2023-3611 CVE-2023-4459 CVE-2023-3776

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here