Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2020-5642

Опубликовано: 08 апр. 2020
Источник: oracle-oval
Платформа: Oracle Linux 6
Платформа: Oracle Linux 7

Описание

ELSA-2020-5642: Unbreakable Enterprise kernel security update (IMPORTANT)

[4.1.12-124.38.1]

  • rds: transport module should be auto loaded when transport is set (Rao Shoaib) [Orabug: 31031928]
  • KVM: X86: Fix NULL deref in vcpu_scan_ioapic (Wanpeng Li) [Orabug: 31078882]
  • vhost: Check docket sk_family instead of call getname (Eugenio Perez) [Orabug: 31085993] {CVE-2020-10942}
  • Revert 'oled: give panic handler chance to run before kexec' (Wengang Wang) [Orabug: 31098797]

[4.1.12-124.37.3]

  • kernel: cpu.c: fix return in void function cpu_smt_disable (Mihai Carabas) [Orabug: 31047871]
  • net: qlogic: Fix memory leak in ql_alloc_large_buffers (Navid Emamdoost) [Orabug: 31055327] {CVE-2019-18806}
  • swiotlb: clean up reporting (Kees Cook) [Orabug: 31085017] {CVE-2018-5953}
  • KVM: x86: Expose more Intel AVX512 feature to guest (Luwei Kang) [Orabug: 31085086]
  • x86/cpufeature: Enable new AVX-512 features (Fenghua Yu) [Orabug: 31085086]

[4.1.12-124.37.2]

  • xenbus: req->err should be updated before req->state (Dongli Zhang) [Orabug: 30705030]
  • xenbus: req->body should be updated before req->state (Dongli Zhang) [Orabug: 30705030]

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

kernel-uek

4.1.12-124.38.1.el6uek

kernel-uek-debug

4.1.12-124.38.1.el6uek

kernel-uek-debug-devel

4.1.12-124.38.1.el6uek

kernel-uek-devel

4.1.12-124.38.1.el6uek

kernel-uek-doc

4.1.12-124.38.1.el6uek

kernel-uek-firmware

4.1.12-124.38.1.el6uek

Oracle Linux 7

Oracle Linux x86_64

kernel-uek

4.1.12-124.38.1.el7uek

kernel-uek-debug

4.1.12-124.38.1.el7uek

kernel-uek-debug-devel

4.1.12-124.38.1.el7uek

kernel-uek-devel

4.1.12-124.38.1.el7uek

kernel-uek-doc

4.1.12-124.38.1.el7uek

kernel-uek-firmware

4.1.12-124.38.1.el7uek

Связанные уязвимости

oracle-oval
около 5 лет назад

ELSA-2020-5649: Unbreakable Enterprise kernel security update (IMPORTANT)

oracle-oval
около 5 лет назад

ELSA-2020-5644: Unbreakable Enterprise kernel security update (IMPORTANT)

CVSS3: 5.5
ubuntu
больше 5 лет назад

A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) by triggering pci_dma_mapping_error() failures, aka CID-1acb8f2a7a9f.

CVSS3: 5.5
redhat
больше 5 лет назад

A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) by triggering pci_dma_mapping_error() failures, aka CID-1acb8f2a7a9f.

CVSS3: 5.5
nvd
больше 5 лет назад

A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) by triggering pci_dma_mapping_error() failures, aka CID-1acb8f2a7a9f.