Lucene search

K
oraclelinuxOracleLinuxELSA-2022-0188
HistoryJan 21, 2022 - 12:00 a.m.

kernel security and bug fix update

2022-01-2100:00:00
linux.oracle.com
34

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.6%

[4.18.0-348.12.2_5.OL8]

  • Update Oracle Linux certificates (Kevin Lyons)
  • Disable signing for aarch64 (Ilya Okomin)
  • Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  • Update x509.genkey [Orabug: 24817676]
  • Conflict with shim-ia32 and shim-x64 <= 15-11.0.5
    [4.18.0-348.12.2_5]
  • vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] {CVE-2022-0185}
  • xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Bruno Meneguele) [2034864 2034865] {CVE-2021-4155}
    [4.18.0-348.12.1_5]
  • tcp: don’t free a FIN sk_buff in tcp_remove_empty_skb() (Guillaume Nault) [2021574 2016210]
  • kernel.spec: Add support to use vmlinux.h (Jiri Olsa) [2031053 1989087]
  • spec: Add vmlinux.h to kernel-devel package (Jiri Olsa) [2031053 1989087]
  • x86/mce: Avoid infinite loop for copy from user recovery (Prarit Bhargava) [2008789 1999550]
  • x86/mce: Rename kill_it to kill_current_task (Prarit Bhargava) [2008789 1999550]
  • x86/mce: Recover from poison found while copying from user space (Prarit Bhargava) [2008789 1999550]
  • x86/mce: Delay clearing IA32_MCG_STATUS to the end of do_machine_check() (Prarit Bhargava) [2008789 1999550]
  • x86/mce: Send #MC singal from task work (Prarit Bhargava) [2008789 1999550]
    [4.18.0-348.11.1_5]
  • blk-mq: avoid to iterate over stale request (Ming Lei) [2034396 1997338]
  • rcu: Tighten rcu_advance_cbs_nowake() checks (Daniel Vacek) [2032579 2013408]
    [4.18.0-348.10.1_5]
  • selftests: add a test case for mirred egress to ingress (Xin Long) [2024411 1983894]
  • net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long) [2024411 1983894]
    [4.18.0-348.9.1_5]
  • ixgbe: Revert ‘bpf, devmap: Move drop error path to devmap for XDP_REDIRECT’ (Ken Cox) [2029845 2024240]
  • i40e: Revert ‘bpf, devmap: Move drop error path to devmap for XDP_REDIRECT’ (Stefan Assmann) [2029845 2024225]
  • rcu/nocb: Perform deferred wake up before last idle’s need_resched() check (Waiman Long) [2029449 2008340]
    [4.18.0-348.8.1_5]
  • ice: Fix VF true promiscuous mode (Jonathan Toppins) [2026698 1970643]
  • ice: Remove toggling of antispoof for VF trusted promiscuous mode (Jonathan Toppins) [2026698 1970643]
  • ice: Fix replacing VF hardware MAC to existing MAC filter (Jonathan Toppins) [2026698 1970643]
  • ice: Fix not stopping Tx queues for VFs (Jonathan Toppins) [2026698 1970643]
  • ice: Fix race conditions between virtchnl handling and VF ndo ops (Jonathan Toppins) [2026698 1970643]
  • net/netif_receive_skb_core: Use migrate_disable() (Luis Claudio R. Goncalves) [2027689 2024168]
  • crypto: jitter - consider 32 LSB for APT (Herbert Xu) [2029365 1994390]
  • xfs: fix I_DONTCACHE (Carlos Maiolino) [2028534 2024969]

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.6%