Lucene search

K
oraclelinuxOracleLinuxELSA-2022-4642
HistoryMay 19, 2022 - 12:00 a.m.

kernel security and bug fix update

2022-05-1900:00:00
linux.oracle.com
34

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

[3.10.0-1160.66.1.OL7]

  • Update Oracle Linux certificates (Ilya Okomin)
  • Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)([email protected])
  • Update x509.genkey [Orabug: 24817676]
  • Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
  • Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)
    [3.10.0-1160.66.1]
  • net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
  • CI: Drop baseline runs (Veronika Kabatova)
  • perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
  • perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
  • perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]
    [3.10.0-1160.65.1]
  • CI: Remove deprecated option (Veronika Kabatova)
  • RDMA/core: Fix panic when port_pkey_list isn’t initialized (Kamal Heib) [2046571]
    [3.10.0-1160.64.1]
  • cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}
    [3.10.0-1160.63.1]
  • NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
  • SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
  • SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
  • SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
  • kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P