Описание
ELSA-2015-3101: Unbreakable Enterprise kernel security update (IMPORTANT)
kernel-uek [3.8.13-118.2.1]
- ipc/sem.c: fully initialize sem_array before making it visible (Manfred Spraul) [Orabug: 22277382] {CVE-2015-7613}
- ipc: fix msg newqueue add (Guru Anbalagane) [Orabug: 22277382] {CVE-2015-7613}
[3.8.13-118.1.1]
- sctp: fix race on protocol/netns initialization (Marcelo Ricardo Leitner) [Orabug: 22249981] {CVE-2015-5283}
- Initialize msg/shm IPC objects before doing ipc_addid() (Linus Torvalds) [Orabug: 22250045] {CVE-2015-7613}
- ixgbe: reset copper phy power mode (Ethan Zhao) [Orabug: 22271769]
Обновленные пакеты
Oracle Linux 6
Oracle Linux x86_64
dtrace-modules-3.8.13-118.2.1.el6uek
0.4.5-3.el6
kernel-uek
3.8.13-118.2.1.el6uek
kernel-uek-debug
3.8.13-118.2.1.el6uek
kernel-uek-debug-devel
3.8.13-118.2.1.el6uek
kernel-uek-devel
3.8.13-118.2.1.el6uek
kernel-uek-doc
3.8.13-118.2.1.el6uek
kernel-uek-firmware
3.8.13-118.2.1.el6uek
Oracle Linux 7
Oracle Linux x86_64
dtrace-modules-3.8.13-118.2.1.el7uek
0.4.5-3.el7
kernel-uek
3.8.13-118.2.1.el7uek
kernel-uek-debug
3.8.13-118.2.1.el7uek
kernel-uek-debug-devel
3.8.13-118.2.1.el7uek
kernel-uek-devel
3.8.13-118.2.1.el7uek
kernel-uek-doc
3.8.13-118.2.1.el7uek
kernel-uek-firmware
3.8.13-118.2.1.el7uek
Связанные CVE
Связанные уязвимости
The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished.
The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished.
The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished.
The sctp_init function in net/sctp/protocol.c in the Linux kernel befo ...