ELSA-2022-9410

Опубликовано: 20 мая 2022

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2022-9410: Unbreakable Enterprise kernel security update (IMPORTANT)

[4.14.35-2047.513.2.1]

perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34175592] {CVE-2022-1729}

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

kernel-uek

4.14.35-2047.513.2.1.el7uek

kernel-uek-debug

4.14.35-2047.513.2.1.el7uek

kernel-uek-debug-devel

4.14.35-2047.513.2.1.el7uek

kernel-uek-devel

4.14.35-2047.513.2.1.el7uek

kernel-uek-headers

4.14.35-2047.513.2.1.el7uek

kernel-uek-tools

4.14.35-2047.513.2.1.el7uek

kernel-uek-tools-libs

4.14.35-2047.513.2.1.el7uek

kernel-uek-tools-libs-devel

4.14.35-2047.513.2.1.el7uek

perf

4.14.35-2047.513.2.1.el7uek

python-perf

4.14.35-2047.513.2.1.el7uek

Oracle Linux x86_64

kernel-uek

4.14.35-2047.513.2.1.el7uek

kernel-uek-debug

4.14.35-2047.513.2.1.el7uek

kernel-uek-debug-devel

4.14.35-2047.513.2.1.el7uek

kernel-uek-devel

4.14.35-2047.513.2.1.el7uek

kernel-uek-doc

4.14.35-2047.513.2.1.el7uek

kernel-uek-tools

4.14.35-2047.513.2.1.el7uek

Связанные CVE

CVE-2022-1729

Ссылки на источники

Связанные уязвимости

CVE-2022-1729

CVSS3: 7

ubuntu

почти 3 года назад

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.