Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12588)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12588 advisory. - netfilter: nftables: stricter validation of element data Pablo Neira Ayuso Orabug: 34362006 CVE-2022-34918 - KVM: x86: do not report a vCPU as...

Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2023-12565)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12565 advisory. - firewire: fix potential uaf in outboundphypacketcallback Chengfeng Ye Orabug: 35493606 CVE-2023-3159 - ath9k: fix use-after-free in ath9khifusbrxcb...

grub2 security update

2.06-46.0.4.el91.3 - Bump SBAT metadata for grub to 3 Orabug: 34872719 - Fix CVE-2022-3775 Orabug: 34871953 - Enable signing for aarch64 EFI - Fix signing certificate names - Enable back btrfs grub module for EFI pre-built image Orabug: 34360986 - Replaced bugzilla.oracle.com references Orabug:...

Oracle Linux 8 : Unbreakable Enterprise kernel-container (ELSA-2023-12413)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12413 advisory. - netfilter: nftables: deactivate anonymous set from preparation phase Pablo Neira Ayuso Orabug: 35382084 CVE-2023-32233 - KVM: nVMX: add missing...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12394)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12394 advisory. - An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x8664 lacks consistency checks for CR0 and CR4...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2023-12412)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12412 advisory. - netfilter: nftables: deactivate anonymous set from preparation phase Pablo Neira Ayuso Orabug: 35382084 CVE-2023-32233 - KVM: nVMX: add missing...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2023-12393)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12393 advisory. - netfilter: nftables: deactivate anonymous set from preparation phase Pablo Neira Ayuso Orabug: 35382083 CVE-2023-32233 Tenable has extracted the precedin...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2023-12375)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12375 advisory. - net: sched: schqfq: prevent slab-out-of-bounds in qfqactivateagg Gwangun Jung Orabug: 35354791 CVE-2023-2248 - prlimit: doprlimit needs to have ...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2023-12339)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12339 advisory. - KVM: nVMX: add missing consistency checks for CR0 and CR4 Paolo Bonzini Orabug: 35278210 CVE-2023-30456 Tenable has extracted the preceding description...

Unbreakable Enterprise kernel security update

4.1.12-124.74.2 - kvm: initialize all of the kvmdebugregs structure before sending it to userspace Greg Kroah-Hartman Orabug: 35250098 CVE-2023-1513 - staging: rtl8712: fix use after free bugs Dan Carpenter Orabug: 35212876 CVE-2022-4095 - staging: rtl8712: rtl8712cmd.c: fixed comparison to null...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2023-12323)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12323 advisory. - kvm: initialize all of the kvmdebugregs structure before sending it to userspace Greg Kroah-Hartman Orabug: 35250098 CVE-2023-1513 - staging:...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.318.7.1.el7 - KVM: arm64: Disabling disabled PMU counters wastes a lot of time Alexandre Chartre Orabug: 33312587 - KVM: arm64: Don't zero the cycle count register when PMCREL0.P is set Alexandru Elisei Orabug: 33312587 - KVM: arm64: pmu: Only handle supported event counters Eric Auge...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12255)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12255 advisory. - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions Tom Lendacky Orabug: 35166671 CVE-2022-27672 - KVM: x86: Mitigate t...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2023-12242)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12242 advisory. - hvnetvsc: Add check for kvmallocarray Jiasheng Jiang Orabug: 34951483 CVE-2022-3107 - wifi: rndiswlan: Prevent buffer overflow in rndisqueryoid Szym...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2023-12243)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-12243 advisory. - hvnetvsc: Add check for kvmallocarray Jiasheng Jiang Orabug: 34951483 CVE-2022-3107 Tenable has extracted the preceding description block directly...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2023-12226)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12226 advisory. 5.15.0-100.96.32 - crypto: Report fips module name and version for aarch64 Saeed Mirzamohammadi Orabug: 35225251 - uek-rpm: Enable RFC7919 config for aarch...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2023-12232)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12232 advisory. - netfilter: nftables: fix null deref due to zeroed list head Florian Westphal Orabug: 35181628 CVE-2023-1095 - sctp: fail if no bound addresses c...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2023-12207)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12207 advisory. - ipv6: raw: Deduct extension header length in rawv6pushpendingframes Herbert Xu Orabug: 35005829 CVE-2023-0394 - net: sched: disallow noqueue for...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12206)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12206 advisory. - ipv6: raw: Deduct extension header length in rawv6pushpendingframes Herbert Xu Orabug: 35005829 CVE-2023-0394 - net: sched: disallow noqueue for...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2023-12200)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-12200 advisory. - ipv6: raw: Deduct extension header length in rawv6pushpendingframes Herbert Xu Orabug: 35005830 CVE-2023-0394 - net: sched: disallow noqueue for qdi...