1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2021-9458

[ELSA-2021-9458] Unbreakable Enterprise kernel-container security update

Severity Important
Affected Packages 1
CVEs 7
Info Packages References Vulnerabilities

[4.14.35-2047.507.7.5.el7]
- Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa) [Orabug: 33369947] {CVE-2021-3573}
- Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma) [Orabug: 33369947]
- Bluetooth: fix the erroneous flush_work() order (Lin Ma) [Orabug: 33369947] {CVE-2021-3564}
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o) [Orabug: 33369956] {CVE-2021-40490}
- fuse: fix bad inode (Miklos Szeredi) [Orabug: 33369955] {CVE-2020-36322}
- tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo) [Orabug: 33369954] {CVE-2021-3679}
- virtio_console: Assure used length from device is limited (Xie Yongji) [Orabug: 33369953] {CVE-2021-38160}
- sctp: validate from_addr_param return (Marcelo Ricardo Leitner) [Orabug: 33369952] {CVE-2021-3655}

Package Affected Version
pkg:rpm/oraclelinux/kernel-uek-container?distro=oraclelinux-7 < 4.14.35-2047.507.7.5.el7
ID
ELSA-2021-9458
Severity
important
URL
https://linux.oracle.com/errata/ELSA-2021-9458.html
Published
2021-09-22T00:00:00
(3 years ago)
Modified
2021-09-22T00:00:00
(3 years ago)
Rights
Copyright 2021 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/kernel-uek-container?distro=oraclelinux-7 oraclelinux kernel-uek-container < 4.14.35-2047.507.7.5.el7 oraclelinux-7
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date