Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Oracle Linux 7 ELSA-2023-12232 Critical Kernel Security Update

oracle
Calendar Grey April 4, 2023
Oracle Linux Logo Esm H88
Oracle Linux Security Notice ELSA-2023-12233: Kernel Significant Update with essential patches and upgrades aimed at bolstering security.
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

Summary

[4.1.12-124.73.2.el7uek] - netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal) [Orabug: 35181628] {CVE-2023-1095} - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) [Orabug: 35181461] {CVE-2023-1074} - HID: check empty report_list in hid_validate_values() (Pietro Borrello) [Orabug: 35181168] {CVE-2023-1073} - media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (Will Deacon) [Orabug: 35180270] {CVE-2020-0404} [4.1.12-124.73.1.el7uek] - mm/mincore.c: make mincore() more conservative (Jiri Kosina) [Orabug: 35133279] {CVE-2019-5489} - mm: introduce vma_is_anonymous(vma) helper (Oleg Nesterov) [Orabug: 35133279] - Revert "Change mincore() to count "mapped" pages rather than "cached" pages" (Linus Torvalds) [Orabug: 35124616] - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005831] {CVE-2023-0394}

Topics%20covered

Topics Covered

security advisory high severity kernel update security fix critical update Oracle Linux

SRPMs

https://oss.oracle.com:443/ol7/SRPMS-updates//kernel-uek-4.1.12-124.73.2.el7uek.src.rpm

x86_64

kernel-uek-doc-4.1.12-124.73.2.el7uek.noarch.rpm kernel-uek-firmware-4.1.12-124.73.2.el7uek.noarch.rpm kernel-uek-4.1.12-124.73.2.el7uek.x86_64.rpm kernel-uek-devel-4.1.12-124.73.2.el7uek.x86_64.rpm kernel-uek-debug-4.1.12-124.73.2.el7uek.x86_64.rpm kernel-uek-debug-devel-4.1.12-124.73.2.el7uek.x86_64.rpm

aarch64

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2023-0394 CVE-2019-5489 CVE-2020-0404 CVE-2023-1073 CVE-2023-1074 CVE-2023-1095

Topics%20covered

Topics Covered

security advisory high severity kernel update security fix critical update Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here