Описание
ELSA-2017-0294: kernel security update (IMPORTANT)
- [3.10.0-514.6.2.OL7]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [bug 24817676]
[3.10.0-514.6.2]
- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1423462 1423463]
Обновленные пакеты
Oracle Linux 7
Oracle Linux x86_64
kernel
3.10.0-514.6.2.el7
kernel-abi-whitelists
3.10.0-514.6.2.el7
kernel-debug
3.10.0-514.6.2.el7
kernel-debug-devel
3.10.0-514.6.2.el7
kernel-devel
3.10.0-514.6.2.el7
kernel-doc
3.10.0-514.6.2.el7
kernel-headers
3.10.0-514.6.2.el7
kernel-tools
3.10.0-514.6.2.el7
kernel-tools-libs
3.10.0-514.6.2.el7
kernel-tools-libs-devel
3.10.0-514.6.2.el7
perf
3.10.0-514.6.2.el7
python-perf
3.10.0-514.6.2.el7
Связанные CVE
Связанные уязвимости
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
The dccp_rcv_state_process function in net/dccp/input.c in the Linux k ...
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.