Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

Oracle Linux 8 ELSA-2021-9621 Critical: Kernel Buffer Overflow

oracle
Calendar Grey December 20, 2021
Scroller Oracle
Revised Oracle Linux 8 security bulletin ELSA-2021-9622 tackles kernel vulnerabilities to strengthen overall system security.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network

Summary

[5.4.17-2136.302.6.1.el8uek] - rds/ib: Use both iova and key in free_mr socket call (aru kolappan) [Orabug: 33667276] [5.4.17-2136.302.6.el8uek] - Revert "fs: align IOCB_* flags with RWF_* flags" (Prasad Singamsetty) [Orabug: 33627551] [5.4.17-2136.302.5.el8uek] - Revert "drm: Initialize struct drm_crtc_state.no_vblank from device settings" (Somasundaram Krishnasamy) [Orabug: 33611832] - Revert "drm/atomic-helper: reset vblank on crtc reset" (Somasundaram Krishnasamy) [Orabug: 33611832] - net/mlx5: E-Switch, Support flow source for local vport (Hamdan Igbaria) [Orabug: 29444833] - net/mlx5e: E-Switch, Specify flow_source for rule with no in_port (Jianbo Liu) [Orabug: 29444833] - net/mlx5e: E-Switch, Add misc bit when misc fields changed for mirroring (Jianbo Liu) [Orabug: 29444833] - uek-rpm: configs: disable CONFIG_READ_ONLY_THP_FOR_FS (Todd Vierling) [Orabug: 33538583] - uek-rpm: Remove CONFIG_CC_HAS_WARN_MAYBE_UNINITIALIZED=y and CONFIG_CC_DISABLE_WARN_MA...

Read the Full Advisory

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.302.6.1.el8uek.src.rpm

x86_64

aarch64

kernel-uek-5.4.17-2136.302.6.1.el8uek.aarch64.rpm kernel-uek-debug-5.4.17-2136.302.6.1.el8uek.aarch64.rpm kernel-uek-debug-devel-5.4.17-2136.302.6.1.el8uek.aarch64.rpm kernel-uek-devel-5.4.17-2136.302.6.1.el8uek.aarch64.rpm kernel-uek-doc-5.4.17-2136.302.6.1.el8uek.noarch.rpm

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2021-41864

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.