Lucene search

K
oraclelinuxOracleLinuxELSA-2018-4062
HistoryApr 10, 2018 - 12:00 a.m.

Unbreakable Enterprise kernel security update

2018-04-1000:00:00
linux.oracle.com
73

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.1%

[4.1.12-112.16.7]

  • mlx4: change the ICM table allocations to lowest needed size (Daniel Jurgens) [Orabug: 27718305]
  • autofs: use dentry flags to block walks during expire (Ian Kent) [Orabug: 26032471] [Orabug: 27766149]
  • autofs races (Al Viro) [Orabug: 27766149] [Orabug: 27766149]
  • crypto: FIPS - allow tests to be disabled in FIPS mode (Stephan Mueller) [Orabug: 26182706]
  • crypto: rng - Zero seed in crypto_rng_reset (Herbert Xu) [Orabug: 26182706]
  • crypto: xts - consolidate sanity check for keys (Stephan Mueller) [Orabug: 26182706]
    [4.1.12-112.16.6]
  • fork: fix incorrect fput of ->exe_file causing use-after-free (Eric Biggers) [Orabug: 27290198] {CVE-2017-17052}
  • negotiate_mq should happen in all cases of a new VBD being discovered by xen-blkfront, whether called through _probe() or a hot-attached new VBD from dom-0 via xenstore. Otherwise, hot-attached new VBDs are left configured without multi-queue. (Patrick Colp) [Orabug: 27383895]
  • rds: Fix NULL pointer dereference in __rds_rdma_map (Hakon Bugge) [Orabug: 27477007]
  • nvme: fix uninitialized prp2 value on small transfers (Jan H. Schonherr) [Orabug: 27581008]
  • xen-netfront: Improve error handling during initialization (Ross Lagerwall) [Orabug: 27655820]
  • RDS: IB: Fix null pointer issue (Guanglei Li) [Orabug: 27636704]
  • mstflint: update Makefile and Kconfig (Qing Huang) [Orabug: 27656465]
  • target: add inquiry_product module param to override LIO default (Kyle Fortin) [Orabug: 27679482]
  • target: add inquiry_vendor module param to override LIO-ORG (Kyle Fortin) [Orabug: 27679482]
  • net/rds: Avoid copy overhead if send buff is full (Gerd Rausch) [Orabug: 27747176]
    [4.1.12-112.16.5]
  • IB/core: Avoid calling ib_query_device (Or Gerlitz) [Orabug: 27687710]
  • IB/core: Save the device attributes on the device structure (Ira Weiny) [Orabug: 27687710]
  • KVM: x86: fix singlestepping over syscall (Paolo Bonzini) [Orabug: 27669907] {CVE-2017-7518} {CVE-2017-7518}
  • xen/acpi: upload _PSD info for non-dom0 CPUs too (Joao Martins) [Orabug: 27655757]
  • Revert RDS: dont commit to queue till transport connection is up (Santosh Shilimkar)

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.1%