ELSA-2021-9460

Опубликовано: 22 сент. 2021

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2021-9460: Unbreakable Enterprise kernel security update (IMPORTANT)

[4.14.35-2047.507.7.5]

Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa) [Orabug: 33369947] {CVE-2021-3573}
Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma) [Orabug: 33369947]
Bluetooth: fix the erroneous flush_work() order (Lin Ma) [Orabug: 33369947] {CVE-2021-3564}
ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o) [Orabug: 33369956] {CVE-2021-40490}
fuse: fix bad inode (Miklos Szeredi) [Orabug: 33369955] {CVE-2020-36322}
tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo) [Orabug: 33369954] {CVE-2021-3679}
virtio_console: Assure used length from device is limited (Xie Yongji) [Orabug: 33369953] {CVE-2021-38160}
sctp: validate from_addr_param return (Marcelo Ricardo Leitner) [Orabug: 33369952] {CVE-2021-3655}

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

kernel-uek

4.14.35-2047.507.7.5.el7uek

kernel-uek-debug

4.14.35-2047.507.7.5.el7uek

kernel-uek-debug-devel

4.14.35-2047.507.7.5.el7uek

kernel-uek-devel

4.14.35-2047.507.7.5.el7uek

kernel-uek-headers

4.14.35-2047.507.7.5.el7uek

kernel-uek-tools

4.14.35-2047.507.7.5.el7uek

kernel-uek-tools-libs

4.14.35-2047.507.7.5.el7uek

kernel-uek-tools-libs-devel

4.14.35-2047.507.7.5.el7uek

perf

4.14.35-2047.507.7.5.el7uek

python-perf

4.14.35-2047.507.7.5.el7uek

Oracle Linux x86_64

kernel-uek

4.14.35-2047.507.7.5.el7uek

kernel-uek-debug

4.14.35-2047.507.7.5.el7uek

kernel-uek-debug-devel

4.14.35-2047.507.7.5.el7uek

kernel-uek-devel

4.14.35-2047.507.7.5.el7uek

kernel-uek-doc

4.14.35-2047.507.7.5.el7uek

kernel-uek-tools

4.14.35-2047.507.7.5.el7uek

Связанные CVE

Ссылки на источники

Связанные уязвимости

ELSA-2021-9458

oracle-oval

больше 3 лет назад

ELSA-2021-9458: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2021-9488

oracle-oval

больше 3 лет назад

ELSA-2021-9488: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2021-9485

oracle-oval

больше 3 лет назад

ELSA-2021-9485: Unbreakable Enterprise kernel security update (IMPORTANT)

CVE-2020-36322

CVSS3: 5.5

ubuntu

около 4 лет назад

An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950.

CVE-2020-36322

CVSS3: 5.5

redhat

больше 4 лет назад