OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0019)

The remote OracleVM system is missing necessary patches to address critical security updates : - KVM: x86: Remove spurious semicolon Joao Martins Orabug: 31413782 - genirq: Use rcu in kstatirqsusr Eric Dumazet - genirq: Make sparseirqlock protect what it should protect Thomas Gleixner Orabug:...

CVE-2015-2925

The prependpath function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack."...

CVE-2014-8559

The dwalk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of renamelock, which allows local users to cause a denial of service deadlock and system hang via a crafted application...