Stay Secure with the Latest Linux Advisories

security advisorysecurity issuekernel update

Oracle Linux 6: ELSA-2023-12688 Critical: Kernel Update Released

The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2023-12688 https://linux.oracle.com/errata/ELSA-2023-12688.html The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network: x86_64: kernel-uek-doc-4.1.12-124.77.2.el6uek.noarch.rpm kernel-uek-firmware-4.1.12-124.77.2.el6uek.noarch.rpm kernel-uek-4.1.12-124.77.2.el6uek.x86_64.rpm kernel-uek-devel-4.1.12-124.77.2.el6uek.x86_64.rpm kernel-uek-debug-4.1.12-124.77.2.el6uek.x86_64.rpm kernel-uek-debug-devel-4.1.12-124.77.2.el6uek.x86_64.rpm Related CVEs: CVE-2023-1380 CVE-2023-3161 CVE-2023-3141 CVE-2023-3090 CVE-2022-41218 CVE-2023-31084 CVE-2023-35824 Description of changes: [4.1.12-124.77.2.el6uek] - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) [Orabug: 35514108] {CVE-2023-35824} - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai) [Orabug: 35477742] {CVE-2023-31084} - media: dvb_frontend: fix locking issues at dvb_frontend_get_event() (Mauro Carvalho Chehab) [Orabug: 35477742] {CVE-2023-31084} - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820632] {CVE-2022-41218} - media: dvb: dmx: fixed coding style issues of spacing (devendra sharma) [Orabug: 34820632] [4.1.12-124.77.1.el6uek] - ipvlan:Fix out-of-bounds caused by unclear skb-> cb (t.feng) [Orabug: 35550146] {CVE-2023-3090} - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) [Orabug: 35514146] {CVE-2023-3141} - fbcon: Check font dimension limits (Samuel Thibault) [Orabug: 35493679] {CVE-2023-3161} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang) [Orabug: 35250538] {CVE-2023-1380} _______________________________________________ El-errata mailinglist This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux ELSA-2023-12689 resolves severe kernel vulnerabilities. Check out the latest updates and fixes ready for implementation.. Oracle Linux Security, Kernel Update, ELSA-2023-12688, Extended Lifecycle Support, Software Patch. . Severity: Critical. LinuxSecurity.com Team

Aug 24, 2023 •Critical Oracle