Lucene search

K
oraclelinuxOracleLinuxELSA-2017-0307
HistoryFeb 23, 2017 - 12:00 a.m.

kernel security and bug fix update

2017-02-2300:00:00
linux.oracle.com
53

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.823 High

EPSS

Percentile

98.1%

[2.6.32-642.15.1]

  • [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}
    [2.6.32-642.14.1]
  • [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
  • [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
  • [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
  • [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
  • [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
  • [fs] nfs: Don’t pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
  • [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
  • [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
  • [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
  • [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
  • [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
  • [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
  • [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
  • [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
  • [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
  • [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
  • [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.823 High

EPSS

Percentile

98.1%