Unbreakable Enterprise kernel-container security update

2021-09-2200:00:00

linux.oracle.com

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

JSON

[4.14.35-2047.507.7.5.el7]

Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa) [Orabug: 33369947] {CVE-2021-3573}
Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma) [Orabug: 33369947]
Bluetooth: fix the erroneous flush_work() order (Lin Ma) [Orabug: 33369947] {CVE-2021-3564}
ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts’o) [Orabug: 33369956] {CVE-2021-40490}
fuse: fix bad inode (Miklos Szeredi) [Orabug: 33369955] {CVE-2020-36322}
tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo) [Orabug: 33369954] {CVE-2021-3679}
virtio_console: Assure used length from device is limited (Xie Yongji) [Orabug: 33369953] {CVE-2021-38160}
sctp: validate from_addr_param return (Marcelo Ricardo Leitner) [Orabug: 33369952] {CVE-2021-3655}

OSVersionArchitecturePackageVersionFilename
oracle linux7srckernel-uek-container< 4.14.35-2047.507.7.5.el7kernel-uek-container-4.14.35-2047.507.7.5.el7.src.rpm
oracle linux7x86_64kernel-uek-container< 4.14.35-2047.507.7.5.el7kernel-uek-container-4.14.35-2047.507.7.5.el7.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	7	src	kernel-uek-container	< 4.14.35-2047.507.7.5.el7	kernel-uek-container-4.14.35-2047.507.7.5.el7.src.rpm
oracle linux	7	x86_64	kernel-uek-container	< 4.14.35-2047.507.7.5.el7	kernel-uek-container-4.14.35-2047.507.7.5.el7.x86_64.rpm