Unbreakable Enterprise kernel security update

4.1.12-124.92.3 - memcgwriteeventcontrol: fix a user-triggerable oops Al Viro Orabug: 37070674 CVE-2024-45021 - ocfs2: fix races between hole punching and AIO+DIO Su Yue Orabug: 36835819 CVE-2024-40943 4.1.12-124.92.2 - fbdev: savage: Handle err return when savagefbcheckvar failed Cai Xinchen...

Unbreakable Enterprise kernel security update

5.4.17-2136.336.5.3.1.el8uek - mm: avoid leaving partial pfn mappings around in error case Linus Torvalds Orabug: 37311329 CVE-2024-47674 - mm: add remappfnrangenotrack Christoph Hellwig Orabug: 37311329 CVE-2024-47674 - mm/memory.c: make remappfnrange reject unaligned addr Alex Zhang Orabug:...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12845)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12845 advisory. - mm: avoid leaving partial pfn mappings around in error case Linus Torvalds Orabug: 37311329 CVE-2024-47674 - mm: add remappfnrangenotrack...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12830)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12830 advisory. - x86/fpu: Keep xfdstate in sync with MSRIA32XFD Adamos Ttofari Orabug: 37281022 CVE-2024-35801 - devlink: fix possible use-after-free and memory...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12713)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12713 advisory. 5.15.0-300.163.18.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37132350 Tenable has extracted the preceding description blo...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12813)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12813 advisory. - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37137548 CVE-2024-49863 - mm/hugetlb: fix DEBUGLOCKSWARNON1 when...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12815)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12815 advisory. - ice: Add a per-VF limit on number of FDIR filters Ahmed Zaki Orabug: 36964088 CVE-2024-42291 - scsi: lpfc: Fix a possible null pointer dereferen...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12814)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12814 advisory. - filelock: Fix fcntl/close race recovery compat path Jann Horn Orabug: 36874759 CVE-2024-41012 CVE-2024-41020 - jfs: don't walk off the end of ealist...

Unbreakable Enterprise kernel security update

5.4.17-2136.337.5 - net/mlx5: disable the 'fast unload' feature on Exadata systems Qing Huang Orabug: 37093177 5.4.17-2136.337.4 - ocfs2: reserve space for inline xattr before attaching reflink tree Gautham Ananthakrishna Orabug: 37199020 - Revert 'ocfs2: ocfs2 crash due to invalid hnextleafblk...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2024-12806)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12806 advisory. - vtioctl: fix arrayindexnospec in vtsetactivate Jakob Koschel Orabug: 37101899 CVE-2022-48804 - tty: vtioctl: fix potential Spectre v1 Gustavo A...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12796)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12796 advisory. - mm: avoid leaving partial pfn mappings around in error case Linus Torvalds Orabug: 37174198 CVE-2024-47674 - netfilter: iptables: Fix...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12780)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12780 advisory. - VMCI: Fix use-after-free when removing resource in vmciresourceremove David Fernandez Gonzalez Orabug: 37037205 CVE-2024-46738 - exec: Fix ToCTo...

Unbreakable Enterprise kernel security update

5.15.0-300.163.18.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37132350...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2024-12700)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12700 advisory. - scsi: lpfc: Fix possible memory leak in lpfcrcvpadisc Justin Tee Orabug: 36643241 CVE-2024-35930 - scsi: qla2xxx: Fix command flush on cable pul...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12682)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12682 advisory. - dmaengine: idxd: add a write method for applications to submit work Nikhil Rao Orabug: 36770955 CVE-2024-21823 - dmaengine: idxd: add a new...

Unbreakable Enterprise kernel security update

4.1.12-124.90.3 - SUNRPC: increase size of rpcwaitqueue.qlen from unsigned short to unsigned int Dai Ngo Orabug: 37055439 4.1.12-124.90.2 - scsi: lpfc: Fix possible memory leak in lpfcrcvpadisc Justin Tee Orabug: 36643241 CVE-2024-35930 - scsi: qla2xxx: Fix command flush on cable pull Quinn Tran...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.335.4.1.el7 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37035558...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12618)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12618 advisory. - net: mana: Fix possible double free in error handling path Ma Ke Orabug: 36897038 CVE-2024-42069 - net: relax socket state check at accept time...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12610)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12610 advisory. - MIPS: Octeon: Add PCIe link status check Dave Kleikamp Orabug: 36947196 CVE-2024-40968 - drm/amdgpu: Fix signedness bug in sdmav40processtrapirq...

Unbreakable Enterprise kernel security update

4.14.35-2047.540.4.1 - Revert 'selftests/kcmp: Make the test output consistent and clear' Samasth Norway Ananda Orabug: 37029311 4.14.35-2047.540.4 - kdb: Use the passed prompt in kdbpositioncursor Douglas Anderson - ipvs: Avoid unnecessary calls to skbisgsosctp Ismael Luceno - printk: add kthrea...