Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2016-3656

Опубликовано: 21 дек. 2016
Источник: oracle-oval
Платформа: Oracle Linux 6
Платформа: Oracle Linux 7

Описание

ELSA-2016-3656: Unbreakable Enterprise kernel security update (IMPORTANT)

kernel-uek [3.8.13-118.15.2]

  • x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski) [Orabug: 25269176] {CVE-2016-3157} {CVE-2016-3157}
  • net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo) [Orabug: 25298611] {CVE-2016-7117}

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

dtrace-modules-3.8.13-118.15.2.el6uek

0.4.5-3.el6

kernel-uek

3.8.13-118.15.2.el6uek

kernel-uek-debug

3.8.13-118.15.2.el6uek

kernel-uek-debug-devel

3.8.13-118.15.2.el6uek

kernel-uek-devel

3.8.13-118.15.2.el6uek

kernel-uek-doc

3.8.13-118.15.2.el6uek

kernel-uek-firmware

3.8.13-118.15.2.el6uek

Oracle Linux 7

Oracle Linux x86_64

dtrace-modules-3.8.13-118.15.2.el7uek

0.4.5-3.el7

kernel-uek

3.8.13-118.15.2.el7uek

kernel-uek-debug

3.8.13-118.15.2.el7uek

kernel-uek-debug-devel

3.8.13-118.15.2.el7uek

kernel-uek-devel

3.8.13-118.15.2.el7uek

kernel-uek-doc

3.8.13-118.15.2.el7uek

kernel-uek-firmware

3.8.13-118.15.2.el7uek

Связанные CVE

Связанные уязвимости

oracle-oval
больше 8 лет назад

ELSA-2016-3657: Unbreakable Enterprise kernel security update (IMPORTANT)

CVSS3: 7.8
ubuntu
около 9 лет назад

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause a denial of service (guest OS crash), or obtain sensitive information by leveraging I/O port access.

CVSS3: 7
redhat
больше 9 лет назад

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause a denial of service (guest OS crash), or obtain sensitive information by leveraging I/O port access.

CVSS3: 7.8
nvd
около 9 лет назад

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause a denial of service (guest OS crash), or obtain sensitive information by leveraging I/O port access.

CVSS3: 7.8
debian
около 9 лет назад

The __switch_to function in arch/x86/kernel/process_64.c in the Linux ...