[ELSA-2024-1831] kernel security update

Severity Important

Affected Packages 10

CVEs 4

[2.6.32-754.53.1.OL6]
- net/sched: sch_qfq: refactor parsing of netlink parameters [Orabug: 36517546]
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue {CVE-2023-3611} [Orabug: 36517546]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776} [Orabug: 36517546]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() {CVE-2023-4921} [Orabug: 36517546]
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg {CVE-2023-31436} [Orabug: 36517546]

Package	Affected Version
pkg:rpm/oraclelinux/python-perf?distro=oraclelinux-6	< 2.6.32-754.53.1.el6
pkg:rpm/oraclelinux/perf?distro=oraclelinux-6	< 2.6.32-754.53.1.el6
pkg:rpm/oraclelinux/kernel?distro=oraclelinux-6	< 2.6.32-754.53.1.el6
pkg:rpm/oraclelinux/kernel-headers?distro=oraclelinux-6	< 2.6.32-754.53.1.el6
pkg:rpm/oraclelinux/kernel-firmware?distro=oraclelinux-6	< 2.6.32-754.53.1.el6
pkg:rpm/oraclelinux/kernel-doc?distro=oraclelinux-6	< 2.6.32-754.53.1.el6
pkg:rpm/oraclelinux/kernel-devel?distro=oraclelinux-6	< 2.6.32-754.53.1.el6
pkg:rpm/oraclelinux/kernel-debug?distro=oraclelinux-6	< 2.6.32-754.53.1.el6
pkg:rpm/oraclelinux/kernel-debug-devel?distro=oraclelinux-6	< 2.6.32-754.53.1.el6
pkg:rpm/oraclelinux/kernel-abi-whitelists?distro=oraclelinux-6	< 2.6.32-754.53.1.el6

ID

ELSA-2024-1831

Severity

important

URL

https://linux.oracle.com/errata/ELSA-2024-1831.html

Published

2024-04-22T00:00:00
(4 months ago)

Modified

2024-04-22T00:00:00
(4 months ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2024-1831	https://linux.oracle.com/errata/ELSA-2024-1831.html
CVE	CVE-2023-3611	https://linux.oracle.com/cve/CVE-2023-3611.html
CVE	CVE-2023-3776	https://linux.oracle.com/cve/CVE-2023-3776.html
CVE	CVE-2023-31436	https://linux.oracle.com/cve/CVE-2023-31436.html
CVE	CVE-2023-4921	https://linux.oracle.com/cve/CVE-2023-4921.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/python-perf?distro=oraclelinux-6	oraclelinux	python-perf	< 2.6.32-754.53.1.el6	oraclelinux-6
Affected	pkg:rpm/oraclelinux/perf?distro=oraclelinux-6	oraclelinux	perf	< 2.6.32-754.53.1.el6	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel?distro=oraclelinux-6	oraclelinux	kernel	< 2.6.32-754.53.1.el6	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-headers?distro=oraclelinux-6	oraclelinux	kernel-headers	< 2.6.32-754.53.1.el6	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-firmware?distro=oraclelinux-6	oraclelinux	kernel-firmware	< 2.6.32-754.53.1.el6	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-doc?distro=oraclelinux-6	oraclelinux	kernel-doc	< 2.6.32-754.53.1.el6	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-devel?distro=oraclelinux-6	oraclelinux	kernel-devel	< 2.6.32-754.53.1.el6	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-debug?distro=oraclelinux-6	oraclelinux	kernel-debug	< 2.6.32-754.53.1.el6	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-debug-devel?distro=oraclelinux-6	oraclelinux	kernel-debug-devel	< 2.6.32-754.53.1.el6	oraclelinux-6
Affected	pkg:rpm/oraclelinux/kernel-abi-whitelists?distro=oraclelinux-6	oraclelinux	kernel-abi-whitelists	< 2.6.32-754.53.1.el6	oraclelinux-6

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date