Oracle Linux Security Advisory ELSA-2024-12806

http://linux.oracle.com/errata/ELSA-2024-12806.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-124.91.3.el7uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.91.3.el7uek.noarch.rpm
kernel-uek-4.1.12-124.91.3.el7uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.91.3.el7uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.91.3.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.91.3.el7uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//kernel-uek-4.1.12-124.91.3.el7uek.src.rpm

Related CVEs:

CVE-2022-48760
CVE-2022-48804
CVE-2023-6606




Description of changes:

[4.1.12-124.91.3.el7uek]
- nfs_atomic_open(): prevent parallel nfs_lookup() on a negative hashed (Al Viro)  [Orabug: 37006239]

[4.1.12-124.91.2.el7uek]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang)  [Orabug: 37035560]

[4.1.12-124.91.1.el7uek]
- vt_ioctl: fix array_index_nospec in vt_setactivate (Jakob Koschel)  [Orabug: 37101899]  {CVE-2022-48804}
- tty: vt_ioctl: fix potential Spectre v1 (Gustavo A. R. Silva)  [Orabug: 37101899]  {CVE-2022-48804}
- USB: core: Fix hang in usb_kill_urb by adding memory barriers (Alan Stern)  [Orabug: 37101883]  {CVE-2022-48760}
- smb: client: fix OOB in smbCalcSize() (Paulo Alcantara)  [Orabug: 36165420]  {CVE-2023-6606}


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata