1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2024-12110

[ELSA-2024-12110] Unbreakable Enterprise kernel security update

Severity Important
Affected Packages 12
CVEs 5
Info Packages References Vulnerabilities

[4.1.12-124.82.2]
- Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi) [Orabug: 35959598] {CVE-2020-26555}
- sched/rt: pick_next_rt_entity(): check list_entry (Pietro Borrello) [Orabug: 35181560] {CVE-2023-1077}
- sched/debug: Fix SCHED_WARN_ON() to return a value on !CONFIG_SCHED_DEBUG as well (Ingo Molnar) [Orabug: 35181560]
- sched/debug: Add SCHED_WARN_ON() (Peter Zijlstra) [Orabug: 35181560]

[4.1.12-124.82.1]
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) [Orabug: 35924002] {CVE-2023-42752}
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) [Orabug: 35814457] {CVE-2023-4921}
- ixgbe: fix large MTU request from VF (Samasth Norway Ananda) [Orabug: 33752821] {CVE-2021-33098}

Package Affected Version
pkg:rpm/oraclelinux/kernel-uek?distro=oraclelinux-7 < 4.1.12-124.82.2.el7uek
pkg:rpm/oraclelinux/kernel-uek?distro=oraclelinux-6 < 4.1.12-124.82.2.el6uek
pkg:rpm/oraclelinux/kernel-uek-firmware?distro=oraclelinux-7 < 4.1.12-124.82.2.el7uek
pkg:rpm/oraclelinux/kernel-uek-firmware?distro=oraclelinux-6 < 4.1.12-124.82.2.el6uek
pkg:rpm/oraclelinux/kernel-uek-doc?distro=oraclelinux-7 < 4.1.12-124.82.2.el7uek
pkg:rpm/oraclelinux/kernel-uek-doc?distro=oraclelinux-6 < 4.1.12-124.82.2.el6uek
pkg:rpm/oraclelinux/kernel-uek-devel?distro=oraclelinux-7 < 4.1.12-124.82.2.el7uek
pkg:rpm/oraclelinux/kernel-uek-devel?distro=oraclelinux-6 < 4.1.12-124.82.2.el6uek
pkg:rpm/oraclelinux/kernel-uek-debug?distro=oraclelinux-7 < 4.1.12-124.82.2.el7uek
pkg:rpm/oraclelinux/kernel-uek-debug?distro=oraclelinux-6 < 4.1.12-124.82.2.el6uek
pkg:rpm/oraclelinux/kernel-uek-debug-devel?distro=oraclelinux-7 < 4.1.12-124.82.2.el7uek
pkg:rpm/oraclelinux/kernel-uek-debug-devel?distro=oraclelinux-6 < 4.1.12-124.82.2.el6uek
ID
ELSA-2024-12110
Severity
important
URL
https://linux.oracle.com/errata/ELSA-2024-12110.html
Published
2024-02-01T00:00:00
(7 months ago)
Modified
2024-02-01T00:00:00
(7 months ago)
Rights
Copyright 2024 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/kernel-uek?distro=oraclelinux-7 oraclelinux kernel-uek < 4.1.12-124.82.2.el7uek oraclelinux-7
Affected pkg:rpm/oraclelinux/kernel-uek?distro=oraclelinux-6 oraclelinux kernel-uek < 4.1.12-124.82.2.el6uek oraclelinux-6
Affected pkg:rpm/oraclelinux/kernel-uek-firmware?distro=oraclelinux-7 oraclelinux kernel-uek-firmware < 4.1.12-124.82.2.el7uek oraclelinux-7
Affected pkg:rpm/oraclelinux/kernel-uek-firmware?distro=oraclelinux-6 oraclelinux kernel-uek-firmware < 4.1.12-124.82.2.el6uek oraclelinux-6
Affected pkg:rpm/oraclelinux/kernel-uek-doc?distro=oraclelinux-7 oraclelinux kernel-uek-doc < 4.1.12-124.82.2.el7uek oraclelinux-7
Affected pkg:rpm/oraclelinux/kernel-uek-doc?distro=oraclelinux-6 oraclelinux kernel-uek-doc < 4.1.12-124.82.2.el6uek oraclelinux-6
Affected pkg:rpm/oraclelinux/kernel-uek-devel?distro=oraclelinux-7 oraclelinux kernel-uek-devel < 4.1.12-124.82.2.el7uek oraclelinux-7
Affected pkg:rpm/oraclelinux/kernel-uek-devel?distro=oraclelinux-6 oraclelinux kernel-uek-devel < 4.1.12-124.82.2.el6uek oraclelinux-6
Affected pkg:rpm/oraclelinux/kernel-uek-debug?distro=oraclelinux-7 oraclelinux kernel-uek-debug < 4.1.12-124.82.2.el7uek oraclelinux-7
Affected pkg:rpm/oraclelinux/kernel-uek-debug?distro=oraclelinux-6 oraclelinux kernel-uek-debug < 4.1.12-124.82.2.el6uek oraclelinux-6
Affected pkg:rpm/oraclelinux/kernel-uek-debug-devel?distro=oraclelinux-7 oraclelinux kernel-uek-debug-devel < 4.1.12-124.82.2.el7uek oraclelinux-7
Affected pkg:rpm/oraclelinux/kernel-uek-debug-devel?distro=oraclelinux-6 oraclelinux kernel-uek-debug-devel < 4.1.12-124.82.2.el6uek oraclelinux-6
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date