ELSA-2020-5841

Опубликовано: 10 сент. 2020

Источник: oracle-oval

Платформа: Oracle Linux 6

Платформа: Oracle Linux 7

Описание

ELSA-2020-5841: Unbreakable Enterprise kernel security update (IMPORTANT)

kernel-uek [3.8.13-118.49.1]

sunrpc: use SVC_NET() in svcauth_gss_* functions (Vasily Averin) [Orabug: 31351996] {CVE-2018-16884}
sunrpc: use-after-free in svc_process_common() (Vasily Averin) [Orabug: 31351996] {CVE-2018-16884}
af_packet: set defaule value for tmo (Mao Wenan) [Orabug: 31439108] {CVE-2019-20812}
vgacon: Fix for missing check in scrollback handling (Yunhai Zhang) [Orabug: 31705122] {CVE-2020-14331} {CVE-2020-14331}
rename kABI whitelists to lockedlists (Dan Duval) [Orabug: 31783152]

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

dtrace-modules-3.8.13-118.49.1.el6uek

0.4.5-3.el6

kernel-uek

3.8.13-118.49.1.el6uek

kernel-uek-debug

3.8.13-118.49.1.el6uek

kernel-uek-debug-devel

3.8.13-118.49.1.el6uek

kernel-uek-devel

3.8.13-118.49.1.el6uek

kernel-uek-doc

3.8.13-118.49.1.el6uek

kernel-uek-firmware

3.8.13-118.49.1.el6uek

Oracle Linux 7

Oracle Linux x86_64

dtrace-modules-3.8.13-118.49.1.el7uek

0.4.5-3.el7

kernel-uek

3.8.13-118.49.1.el7uek

kernel-uek-debug

3.8.13-118.49.1.el7uek

kernel-uek-debug-devel

3.8.13-118.49.1.el7uek

kernel-uek-devel

3.8.13-118.49.1.el7uek

kernel-uek-doc

3.8.13-118.49.1.el7uek

kernel-uek-firmware

3.8.13-118.49.1.el7uek

Связанные CVE

CVE-2019-20812

CVE-2018-16884

CVE-2020-14331

Ссылки на источники

Связанные уязвимости

CVE-2019-20812

CVSS3: 5.5

ubuntu

около 5 лет назад

An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a denial of service (CPU consumption and soft lockup) in a certain failure case involving TPACKET_V3, aka CID-b43d1f9f7067.