Lucene search

K
oraclelinuxOracleLinuxELSA-2019-2473
HistoryAug 14, 2019 - 12:00 a.m.

kernel security and bug fix update

2019-08-1400:00:00
linux.oracle.com
196

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.2%

[2.6.32-754.18.2.OL6]

  • Update genkey [bug 25599697]
    [2.6.32-754.18.2]
  • [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
  • [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
    [2.6.32-754.18.1]
  • [virt] xenbus: don’t look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
  • [virt] xenbus: don’t BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
  • [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
  • [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
  • [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
  • [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
  • [x86] spec_ctrl: Don’t report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
  • [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
  • [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
  • [fs] binfmt_misc.c: do not allow offset overflow (Bill O’Donnell) [1710149]
  • [x86] pti: Don’t use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
  • [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
  • [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.2%