Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2023-0951
HistoryMar 01, 2023 - 12:00 a.m.

kernel security and bug fix update

2023-03-0100:00:00
linux.oracle.com
30

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

30.4%

JSON
  • [5.14.0-162.18.1_1.OL9]
  • Update Oracle Linux certificates (Kevin Lyons)
  • Disable signing for aarch64 (Ilya Okomin)
  • Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  • Update x509.genkey [Orabug: 24817676]
  • Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
  • Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
  • Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
    [5.14.0-162.18.1_1]
  • powerpc/pseries: Use lparcfg to reconfig VAS windows for DLPAR CPU (Steve Best) [2154305 2133101]
  • redhat/configs: Change the amd-pstate driver from builtin to loadable (David Arcari) [2151274 2143793]
  • powerpc/pseries/mobility: set NMI watchdog factor during an LPM (Steve Best) [2140085 2122830]
  • powerpc/watchdog: introduce a NMI watchdog’s factor (Steve Best) [2140085 2122830]
  • watchdog: export lockup_detector_reconfigure (Steve Best) [2140085 2122830]
  • powerpc/mobility: wait for memory transfer to complete (Steve Best) [2140085 2122830]
    [5.14.0-162.17.1_1]
  • PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404]
  • PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155459 2100404]
  • PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404]
  • PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155459 2100404]
  • PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404]
  • PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155459 2100404]
  • proc: proc_skip_spaces() shouldn’t think it is working on C strings (Wander Lairson Costa) [2152580 2152581] {CVE-2022-4378}
  • proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152580 2152581] {CVE-2022-4378}
  • blk-mq: run queue no matter whether the request is the last request (Ming Lei) [2162535 2118511]
  • netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Florian Westphal) [2161724 2161725] {CVE-2023-0179}
  • nvme-tcp: fix regression that causes sporadic requests to time out (Gopal Tiwari) [2161344 2124526]
  • netfs: Fix dodgy maths (Xiubo Li) [2161418 2138981]
  • netfs: Fix missing xas_retry() calls in xarray iteration (Xiubo Li) [2161418 2138981]
    [5.14.0-162.16.1_1]
  • Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Ricardo Robaina) [2152929 2152931] {CVE-2022-3564}
  • gitlab-ci: use CI templates from production branch (Michael Hofmann)
    [5.14.0-162.15.1_1]
  • KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158815 2140899]
  • x86/fpu: Do not leak fpstate pointer on fork (Rafael Aquini) [2133083 2120448]
  • Revert ‘usb: typec: ucsi: add a common function ucsi_unregister_connectors()’ (Torez Smith) [2153277 2113003]
  • i2c: ismt: Fix an out-of-bounds bug in ismt_access() (David Arcari) [2154859 2119067] {CVE-2022-2873}
    [5.14.0-162.14.1_1]
  • NFSD: fix use-after-free in __nfs42_ssc_open() (Benjamin Coddington) [2152815 2152816] {CVE-2022-4379}
  • PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155930 2155277]
  • PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155930 2155277]
  • PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155930 2155277]
  • sched/core: Always flush pending blk_plug (Phil Auld) [2153792 2115520]
    [5.14.0-162.13.1_1]
  • scsi: qla2xxx: Fix crash when I/O abort times out (Nilesh Javali) [2152178 2115892]
  • net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155145 2153431]
OSVersionArchitecturePackageVersionFilename
oracle linux9srckernel< 5.14.0-162.18.1.el9_1kernel-5.14.0-162.18.1.el9_1.src.rpm
oracle linux9aarch64bpftool< 5.14.0-162.18.1.el9_1bpftool-5.14.0-162.18.1.el9_1.aarch64.rpm
oracle linux9aarch64kernel-cross-headers< 5.14.0-162.18.1.el9_1kernel-cross-headers-5.14.0-162.18.1.el9_1.aarch64.rpm
oracle linux9aarch64kernel-headers< 5.14.0-162.18.1.el9_1kernel-headers-5.14.0-162.18.1.el9_1.aarch64.rpm
oracle linux9aarch64kernel-tools< 5.14.0-162.18.1.el9_1kernel-tools-5.14.0-162.18.1.el9_1.aarch64.rpm
oracle linux9aarch64kernel-tools-libs< 5.14.0-162.18.1.el9_1kernel-tools-libs-5.14.0-162.18.1.el9_1.aarch64.rpm
oracle linux9aarch64kernel-tools-libs-devel< 5.14.0-162.18.1.el9_1kernel-tools-libs-devel-5.14.0-162.18.1.el9_1.aarch64.rpm
oracle linux9aarch64perf< 5.14.0-162.18.1.el9_1perf-5.14.0-162.18.1.el9_1.aarch64.rpm
oracle linux9aarch64python3-perf< 5.14.0-162.18.1.el9_1python3-perf-5.14.0-162.18.1.el9_1.aarch64.rpm
oracle linux9srckernel< 5.14.0-162.18.1.el9_1kernel-5.14.0-162.18.1.el9_1.src.rpm
Rows per page:
1-10 of 321

Related

nessus 78
osv 6
almalinux 2
rocky 2
redhat 33
virtuozzo 1
cbl_mariner 9
debiancve 5
redhatcve 4
ubuntucve 5
cve 5
prion 5
veracode 2
ibm 1
oraclelinux 10
f5 3
openvas 11
githubexploit 4
ubuntu 2
redos 1
centos 1
fedora 8
rosalinux 1
nessus
nessus
AlmaLinux 9 : kernel-rt (ALSA-2023:0979)
2023-02-28 00:00:00
Rocky Linux 9 : kernel-rt (RLSA-2023:0979)
2023-03-02 00:00:00
Oracle Linux 9 : kernel (ELSA-2023-0951)
2023-03-01 00:00:00
osv
osv
Important: kernel security and bug fix update
2023-04-06 15:54:58
Important: kernel security and bug fix update
2023-02-28 00:00:00
Important: kernel-rt security and bug fix update
2023-02-28 00:00:00
almalinux
almalinux
Important: kernel-rt security and bug fix update
2023-02-28 00:00:00
Important: kernel security and bug fix update
2023-02-28 00:00:00
rocky
rocky
kernel security and bug fix update
2023-04-06 15:54:58
kernel-rt security and bug fix update
2023-03-02 01:17:39
redhat
redhat
(RHSA-2023:0951) Important: kernel security and bug fix update
2023-02-28 07:52:58
(RHSA-2023:0979) Important: kernel-rt security and bug fix update
2023-02-28 09:46:58
(RHSA-2023:1008) Important: kpatch-patch security update
2023-02-28 11:39:02
virtuozzo
virtuozzo
[Important] [Security] Virtuozzo ReadyKernel Patch 155.1 for Virtuozzo Hybrid Server 7.5
2023-03-27 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-4379 affecting package hyperv-daemons 5.15.87.1-1
2023-02-14 20:21:22
CVE-2022-4379 affecting package kernel 5.10.174.1-1
2023-05-03 19:35:26
CVE-2022-4379 affecting package hyperv-daemons 5.10.172.1-1
2023-04-07 04:59:28
debiancve
debiancve
CVE-2022-4379
2023-01-10 22:15:14
CVE-2022-2873
2022-08-22 15:15:00
CVE-2022-4378
2023-01-05 16:15:11
redhatcve
redhatcve
CVE-2022-4379
2022-12-27 19:04:50
CVE-2022-2873
2022-08-18 09:08:24
CVE-2022-4378
2022-12-12 13:04:58
ubuntucve
ubuntucve
CVE-2022-2873
2022-08-22 00:00:00
CVE-2022-4379
2023-01-10 00:00:00
CVE-2022-4378
2023-01-05 00:00:00
cve
cve
CVE-2022-4379
2023-01-10 22:15:14
CVE-2022-2873
2022-08-22 15:15:00
CVE-2022-4378
2023-01-05 16:15:11
prion
prion
Design/Logic Flaw
2023-01-10 22:15:00
Design/Logic Flaw
2022-08-22 15:15:00
Stack overflow
2023-01-05 16:15:00
veracode
veracode
Denial Of Service (DoS)
2023-03-13 00:47:38
Denial Of Service (DoS)
2022-12-06 12:17:34
ibm
ibm
Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-1280, CVE-2023-0386, CVE-2022-4269, CVE-2022-2873, CVE-2022-4378)
2023-06-16 19:23:44
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2022-12-12 00:00:00
Unbreakable Enterprise kernel-container security update
2023-01-09 00:00:00
kernel security update
2023-08-11 00:00:00
f5
f5
K000134768 : Linux kernel vulnerability CVE-2022-4378
2023-05-25 00:00:00
K000137186 : Linux kernel vulnerability CVE-2022-3564
2023-10-09 00:00:00
K000132425 : Linux kernel vulnerability CVE-2023-0179
2023-02-07 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5799-1)
2023-01-11 00:00:00
CentOS: Security Advisory for bpftool (CESA-2023:4151)
2023-08-04 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2023-0597579983)
2023-01-24 00:00:00
githubexploit
githubexploit
Exploit for Race Condition in Linux Linux Kernel
2023-09-14 09:07:11
Exploit for Race Condition in Linux Linux Kernel
2023-09-15 10:04:05
Exploit for Integer Overflow or Wraparound in Linux Linux Kernel
2023-01-21 01:02:01
ubuntu
ubuntu
Linux kernel (OEM) vulnerability
2023-01-11 00:00:00
Linux kernel (OEM) vulnerability
2023-02-09 00:00:00
redos
redos
ROS-20230915-09
2023-09-15 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2023-08-03 14:33:32
fedora
fedora
[SECURITY] Fedora 36 Update: kernel-6.1.7-100.fc36
2023-01-23 02:00:15
[SECURITY] Fedora 37 Update: kernel-6.1.7-200.fc37
2023-01-24 00:29:44
[SECURITY] Fedora 36 Update: kernel-tools-6.1.5-100.fc36
2023-01-15 01:39:36
rosalinux
rosalinux
Advisory ROSA-SA-2023-2113
2023-02-14 13:01:31

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

30.4%

JSON
Related for ELSA-2023-0951
nessus78osv6almalinux2rocky2redhat33virtuozzo1cbl_mariner9debiancve5redhatcve4ubuntucve5cve5prion5veracode2ibm1oraclelinux10f53openvas11githubexploit4ubuntu2redos1centos1fedora8rosalinux1