Описание
ELSA-2017-0294-1: kernel security update (IMPORTANT)
- [3.10.0-514.6.2.0.1.el7]
- [ipc] ipc/sem.c: bugfix for semctl(,,GETZCNT) (Manfred Spraul) [orabug 22552377]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [bug 24817676]
Обновленные пакеты
Oracle Linux 7
Oracle Linux x86_64
kernel
3.10.0-514.6.2.0.1.el7
kernel-abi-whitelists
3.10.0-514.6.2.0.1.el7
kernel-debug
3.10.0-514.6.2.0.1.el7
kernel-debug-devel
3.10.0-514.6.2.0.1.el7
kernel-devel
3.10.0-514.6.2.0.1.el7
kernel-doc
3.10.0-514.6.2.0.1.el7
kernel-headers
3.10.0-514.6.2.0.1.el7
kernel-tools
3.10.0-514.6.2.0.1.el7
kernel-tools-libs
3.10.0-514.6.2.0.1.el7
kernel-tools-libs-devel
3.10.0-514.6.2.0.1.el7
perf
3.10.0-514.6.2.0.1.el7
python-perf
3.10.0-514.6.2.0.1.el7
Связанные CVE
Связанные уязвимости
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
The dccp_rcv_state_process function in net/dccp/input.c in the Linux k ...
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.