Lucene search

K
oraclelinuxOracleLinuxELSA-2018-4288
HistoryNov 28, 2018 - 12:00 a.m.

Unbreakable Enterprise kernel security update

2018-11-2800:00:00
linux.oracle.com
61

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

6.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:N/A:N

0.002 Low

EPSS

Percentile

58.0%

[4.1.12-124.22.4]

  • Revert commit 8bd274934987 (‘block: fix bdi vs gendisk lifetime mismatch’) (Ashish Samant) [Orabug: 28968102]
  • KVM/x86: Add IBPB support (Ashok Raj) [Orabug: 28703712]
  • x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky) [Orabug: 28814570]
  • x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky) [Orabug: 28814570]
  • x86/speculation: x86_spec_ctrl_set needs to be called unconditionally (Boris Ostrovsky) [Orabug: 28814570]
  • x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris Ostrovsky) [Orabug: 28814570]
  • x86/intel/spectre_v4: Keep SPEC_CTRL_SSBD when IBRS is in use (Boris Ostrovsky) [Orabug: 28814570]
    [4.1.12-124.22.3]
  • net: net_failover: fix typo in net_failover_slave_register() (Liran Alon) [Orabug: 28122104]
  • virtio_net: Extend virtio to use VF datapath when available (Sridhar Samudrala) [Orabug: 28122104]
  • virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit (Sridhar Samudrala) [Orabug: 28122104]
  • net: Introduce net_failover driver (Sridhar Samudrala) [Orabug: 28122104]
  • net: Introduce generic failover module (Sridhar Samudrala) [Orabug: 28122104]
  • net: introduce lower state changed info structure for LAG lowers (Jiri Pirko) [Orabug: 28122104]
  • net: introduce change lower state notifier (Jiri Pirko) [Orabug: 28122104]
  • net: add info struct for LAG changeupper (Jiri Pirko) [Orabug: 28122104]
  • net: add possibility to pass information about upper device via notifier (Jiri Pirko) [Orabug: 28122104]
  • net: Check CHANGEUPPER notifier return value (Ido Schimmel) [Orabug: 28122104]
  • net: introduce change upper device notifier change info (Jiri Pirko) [Orabug: 28122104]
  • x86/bugs: rework x86_spec_ctrl_set to make its changes explicit (Daniel Jordan) [Orabug: 28271063]
  • x86/bugs: rename ssbd_ibrs_selected to ssbd_userspace_selected (Daniel Jordan) [Orabug: 28271063]
  • x86/bugs: always use x86_spec_ctrl_base or _priv when setting spec ctrl MSR (Daniel Jordan) [Orabug: 28271063]
  • xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath Patil) [Orabug: 28798861]
  • scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart) [Orabug: 28855939]
  • scsi: virtio_scsi: let host do exception handling (Paolo Bonzini) [Orabug: 28856913]
  • net/rds: Fix endless RNR situation (Venkat Venkatsubra) [Orabug: 28857027]
  • scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (Alexander Potapenko) [Orabug: 28892656] {CVE-2018-1000204}
  • cdrom: fix improper type cast, which can leat to information leak. (Young_X) [Orabug: 28929767] {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710}

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

6.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:N/A:N

0.002 Low

EPSS

Percentile

58.0%