Lucene search

K
oraclelinuxOracleLinuxELSA-2024-12149
HistoryFeb 09, 2024 - 12:00 a.m.

kernel security update

2024-02-0900:00:00
linux.oracle.com
9
netlink spec
dpll framework
sch_hfsc
pin-dpll signal
potential memleak
netdev signal

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

5.1%

[5.14.0-362.18.0.2]

  • net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
  • net/sched: sch_hfsc: upgrade ‘rt’ to ‘sc’ when it becomes a inner curve {CVE-2023-4623}
  • dpll: core: Add DPLL framework base functions {CVE-2023-6679}
  • dpll: spec: Add Netlink spec in YAML {CVE-2023-6679}
  • dpll: netlink: Add DPLL framework base functions {CVE-2023-6679}
  • netdev: expose DPLL pin handle for netdevice {CVE-2023-6679}
  • netdev: Remove unneeded semicolon {CVE-2023-6679}
  • dpll: netlink/core: add support for pin-dpll signal phase offset/adjust {CVE-2023-6679}
  • dpll: netlink/core: change pin frequency set behavior {CVE-2023-6679}
  • dpll: Fix potential msg memleak when genlmsg_put_reply failed {CVE-2023-6679}
  • dpll: sanitize possible null pointer dereference in dpll_pin_parent_pin_set() {CVE-2023-6679}

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

5.1%