Lucene search

K
oraclelinuxOracleLinuxELSA-2019-4669
HistoryMay 31, 2019 - 12:00 a.m.

Unbreakable Enterprise kernel security update

2019-05-3100:00:00
linux.oracle.com
167

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

0.001 Low

EPSS

Percentile

24.0%

[4.1.12-124.27.2]

  • x86/speculation/mds: Check for the right microcode before setting mitigation (Kanth Ghatraju) [Orabug: 29797118]
  • vxlan: test dev->flags & IFF_UP before accessing vxlan->dev->dev_addr (Venkat Venkatsubra) [Orabug: 29710939]
  • vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() (Eric Dumazet) [Orabug: 29710939]
  • nvme: allow timed-out ios to retry (James Smart) [Orabug: 29301607]
  • rds: Introduce a pool of worker threads for connection management (Hakon Bugge) [Orabug: 29391909]
  • rds: Use rds_conn_path cp_wq when applicable (Hakon Bugge) [Orabug: 29391909]
  • rds: ib: Implement proper cm_id compare (Hakon Bugge) [Orabug: 29391909]
  • Revert ‘net/rds: prevent RDS connections using stale ARP entries’ (Hakon Bugge) [Orabug: 29391909]
  • rds: ib: Flush ARP cache when needed (Hakon Bugge) [Orabug: 29391909]
  • rds: Add simple heuristics to determine connect delay (Hakon Bugge) [Orabug: 29391909]
  • rds: Fix one-sided connect (Hakon Bugge) [Orabug: 29391909]
  • rds: Consolidate and align ftrace related to connection management (Hakon Bugge) [Orabug: 29391909]
  • rds: ib: Fix gratuitous ARP storm (Hakon Bugge) [Orabug: 29391909]
  • IB/mlx4: Increase the timeout for CM cache (Hakon Bugge) [Orabug: 29391909]
  • kvm/speculation: Allow KVM guests to use SSBD even if host does not (Alejandro Jimenez) [Orabug: 29423804]
  • x86/speculation: Keep enhanced IBRS on when spec_store_bypass_disable=on is used (Alejandro Jimenez) [Orabug: 29423804]
  • x86/speculation: Clean up enhanced IBRS checks in bugs_64.c (Alejandro Jimenez) [Orabug: 29423804]
  • mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli) [Orabug: 29510356]
  • bnxt_en: Reset device on RX buffer errors. (Michael Chan) [Orabug: 29651238]
  • x86/mitigations: Fix the test for Xen PV guest (Boris Ostrovsky) [Orabug: 29774291]
  • x86/speculation/mds: Fix verw usage to use memory operand (Kanth Ghatraju) [Orabug: 29791036] {CVE-2018-12127} {CVE-2018-12130}

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

0.001 Low

EPSS

Percentile

24.0%