Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Oracle Linux 8: ELSA-2021-9487 Critical: Kernel Security Update

oracle
Calendar Grey October 14, 2021
Scroller Oracle
The recent kernel patch for Oracle Linux 8 tackles critical vulnerabilities. Discover further details about the modifications and potential risks associated.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unb= reakable Linux Network:

Summary

[5.4.17-2136.300.7.el8] - KVM: SVM: Fix mismerge in svm_update_pi_irte() (Liam Merwick) [Orabug: 33446526] - Revert "KVM: x86: hyperv: Remove duplicate definitions of Reference TSC Page" (Liam Merwick) [Orabug: 33450675] [5.4.17-2136.300.6.el8] - Revert "scsi: core: Cap scsi_host cmd_per_lun at can_queue" (Jack Vogel) [Orabug: 33441404] [5.4.17-2136.300.5.el8] - dccp: don't duplicate ccid when cloning dccp sock (Lin, Zhenpeng) [Orabug: 33408808] {CVE-2017-6074} {CVE-2020-16119} - block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi) [Orabug: 33396355] - uek-rpm: add ofb.ko and crypto_user.ko modules to nano kernel (Somasundaram Krishnasamy) [Orabug: 31895743] [5.4.17-2136.300.4.el8] - Reintroduce: certs: Add EFI_CERT_X509_GUID support for dbx entries (Konrad Rzeszutek Wilk) [Orabug: 33382994] - bnxt_en: Update the driver version string (Jack Vogel) [Orabug: 33392416] [5.4.17-2136.300.3.el8] - net: bonding: add new option arp_allslaves for arp_ip_target ...

Read the Full Advisory

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates/kernel-uek-container-5.4.17-2136.300.7.el8.src.rpm

x86_64

kernel-uek-container-5.4.17-2136.300.7.el8.x86_64.rpm kernel-uek-container-debug-5.4.17-2136.300.7.el8.x86_64.rpm

aarch64

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2017-6074 CVE-2020-16119

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.