Unbreakable Enterprise kernel security update

2.6.39-400.299.3 - x86/fpu: Make eager FPU default Mihai Carabas Orabug: 28156175 CVE-2018-3665 - ALSA: hrtimer: Fix stall by hrtimercancel Takashi Iwai Orabug: 22876528 CVE-2016-2549 - ALSA: timer: Harden slave timer list handling Takashi Iwai Orabug: 22876528 CVE-2016-2547 CVE-2016-2548 - ALSA:...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4131)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4131 advisory. - netlink: add a start callback for starting a netlink dump Tom Herbert Orabug: 27169581 CVE-2017-16939 Tenable has extracted the preceding description bloc...

Unbreakable Enterprise kernel security update

4.1.12-124.16.2 - netlink: add a start callback for starting a netlink dump Tom Herbert Orabug: 27169581 CVE-2017-16939 - ipsec: Fix aborted xfrm policy dump crash Herbert Xu Orabug: 27169581 CVE-2017-16939...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4114)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4114 advisory. - KVM: SVM: Move spec control call after restore of GS Thomas Gleixner CVE-2018-3639 - x86/bugs: Fix the parameters alignment and missing void Konr...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4110)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4110 advisory. - media: imon: Fix null-ptr-deref in imonprobe Arvind Yadav Orabug: 27208383 CVE-2017-16537 - Input: gtco - fix potential out-of-bound access Dmitr...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4108)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4108 advisory. - netfilter: nfnetlinkcthelper: Add missing permission checks Kevin Cernekee Orabug: 27260771 CVE-2017-17448 - netlink: Add netns check on taps Kev...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4109)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4109 advisory. - media: imon: Fix null-ptr-deref in imonprobe Arvind Yadav Orabug: 27208380 CVE-2017-16537 - Input: gtco - fix potential out-of-bound access Dmitr...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4096)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4096 advisory. - x86/kernel/traps.c: fix tracedienotifier return value Kris Van Hees CVE-2018-8897 - x86/entry/64: Dont use IST entry for BP stack Andy Lutomirski...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4098)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4098 advisory. kernel-uek 3.8.13-118.20.7 - x86/entry/64: Dont use IST entry for BP stack Andy Lutomirski CVE-2018-8897 Tenable has extracted the preceding description blo...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4097)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4097 advisory. 2.6.39-400.298.7 - net/rds: Fix endless RNR situation Hakon Bugge Orabug: 27645402 - x86/entry/64: Dont use IST entry for BP stack Andy Lutomirski...

Unbreakable Enterprise kernel security update

2.6.39-400.298.7 - net/rds: Fix endless RNR situation Hakon Bugge Orabug: 27645402 - x86/entry/64: Dont use IST entry for BP stack Andy Lutomirski CVE-2018-8897...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.20.6 - perf/hwbp: Simplify the perf-hwbp code, fix documentation Linus Torvalds Orabug: 27947608 CVE-2018-100199 3.8.13-118.20.5 - x86/microcode: probe CPU features on microcode update Ankur Arora Orabug: 27806667 - x86/microcode: microcodewrite should not reference...

Unbreakable Enterprise kernel security update

4.1.12-124.14.3 - perf/hwbp: Simplify the perf-hwbp code, fix documentation Linus Torvalds Orabug: 27947602 CVE-2018-100199...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4084)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4084 advisory. - ext4: add validity checks for bitmap block numbers Theodore Ts'o Orabug: 27854373 CVE-2018-1093 CVE-2018-1093 - Input: gtco - fix potential...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4071)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4071 advisory. - net: cdcether: fix divide by 0 on bad descriptors Bjorn Mork Orabug: 27841392 CVE-2017-16649 - sysctl: Drop reference added by grabheader in...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4040)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4040 advisory. - gre: fix a possible skb leak Eric Dumazet Orabug: 26403972 CVE-2017-9074 - ipv6: Fix leak in ipv6gsosegment. David S. Miller Orabug: 26403972...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4041)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4041 advisory. - KEYS: Remove keytype::match in favour of overriding default by matchpreparse Tim Tianyang Chen Orabug: 25757946 CVE-2017-6951 - tcp: initialize...

Unbreakable Enterprise kernel security update

2.6.39-400.298.3 - ext4: limit group search loop for non-extent files Lachlan McIlroy Orabug: 17488415 - ext4: fixup 64-bit divides in 3.0-stable backport of upstream fix Todd Poynor Orabug: 17488415 - ext4: use atomic64t for the per-flexbg freeclusters count Theodore Ts'o Orabug: 17488415 - ext4...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4025)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4025 advisory. - dccp: CVE-2017-8824: use-after-free in DCCP code Mohamed Ghannam Orabug: 27290300 CVE-2017-8824 - ALSA: pcm: prevent UAF in sndpcminfo Robb Glass...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4022)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4022 advisory. - x86: Add another set of MSR accessor functions Borislav Petkov Orabug: 27444923 CVE-2017-5753 - userns: prevent speculative execution Elena...