Lucene search

K
oraclelinuxOracleLinuxELSA-2024-12193
HistoryMar 01, 2024 - 12:00 a.m.

Unbreakable Enterprise kernel security update

2024-03-0100:00:00
linux.oracle.com
13
enterprise kernel
security update
input_set_capability
bounds checking
netfilter
ctnetlink
refcount leak fix
cve-2022-48619
cve-2023-7192
cve-2024-0775
cve-2023-51780
cve-2021-34981

7.5 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

7.2 High

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

28.1%

[4.1.12-124.83.2]

  • Input: add bounds checking to input_set_capability() (Jeff LaBundy) [Orabug: 36192120] {CVE-2022-48619}
  • netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua) [Orabug: 36155598] {CVE-2023-7192}
    [4.1.12-124.83.1]
  • ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts’o) [Orabug: 36229451] {CVE-2024-0775}
  • atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim) [Orabug: 36229396] {CVE-2023-51780}
  • Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails (Thadeu Lima de Souza Cascardo) [Orabug: 36229182] {CVE-2021-34981}

7.5 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

7.2 High

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

28.1%