Описание
ELSA-2022-9264: Unbreakable Enterprise kernel security update (IMPORTANT)
[5.4.17-2136.305.5.5]
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini) [Orabug: 34034594] {CVE-2022-1158}
Обновленные пакеты
Oracle Linux 7
Oracle Linux aarch64
kernel-uek
5.4.17-2136.305.5.5.el7uek
kernel-uek-debug
5.4.17-2136.305.5.5.el7uek
kernel-uek-debug-devel
5.4.17-2136.305.5.5.el7uek
kernel-uek-devel
5.4.17-2136.305.5.5.el7uek
kernel-uek-doc
5.4.17-2136.305.5.5.el7uek
kernel-uek-tools
5.4.17-2136.305.5.5.el7uek
kernel-uek-tools-libs
5.4.17-2136.305.5.5.el7uek
perf
5.4.17-2136.305.5.5.el7uek
python-perf
5.4.17-2136.305.5.5.el7uek
Oracle Linux x86_64
kernel-uek
5.4.17-2136.305.5.5.el7uek
kernel-uek-debug
5.4.17-2136.305.5.5.el7uek
kernel-uek-debug-devel
5.4.17-2136.305.5.5.el7uek
kernel-uek-devel
5.4.17-2136.305.5.5.el7uek
kernel-uek-doc
5.4.17-2136.305.5.5.el7uek
kernel-uek-tools
5.4.17-2136.305.5.5.el7uek
Oracle Linux 8
Oracle Linux aarch64
kernel-uek
5.4.17-2136.305.5.5.el8uek
kernel-uek-debug
5.4.17-2136.305.5.5.el8uek
kernel-uek-debug-devel
5.4.17-2136.305.5.5.el8uek
kernel-uek-devel
5.4.17-2136.305.5.5.el8uek
kernel-uek-doc
5.4.17-2136.305.5.5.el8uek
Oracle Linux x86_64
kernel-uek
5.4.17-2136.305.5.5.el8uek
kernel-uek-debug
5.4.17-2136.305.5.5.el8uek
kernel-uek-debug-devel
5.4.17-2136.305.5.5.el8uek
kernel-uek-devel
5.4.17-2136.305.5.5.el8uek
kernel-uek-doc
5.4.17-2136.305.5.5.el8uek
Связанные CVE
Связанные уязвимости
A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_pgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and potentially corrupt the kernel, resulting in a denial of service condition.
A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_pgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and potentially corrupt the kernel, resulting in a denial of service condition.
A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_pgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and potentially corrupt the kernel, resulting in a denial of service condition.
A flaw was found in KVM. When updating a guest's page table entry, vm_ ...