-
Thu Sep 14 2023 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.1.12-124.78.4.1.el7uek]
- rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge) [Orabug: 35741584] {CVE-2023-22024}
-
Thu Sep 07 2023 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.78.4.el7uek]
- netfilter: nf_tables: verify registers coming from userspace (Harshvardhan Jha) [Orabug: 35776867]
-
Fri Sep 01 2023 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.78.3.el7uek]
- vc_screen: Fix a backport in vcs_read() (Harshit Mogalapalli) [Orabug: 35768682]
-
Tue Aug 22 2023 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.78.2.el7uek]
- xfrm: fix crash in XFRM_MSG_GETSA netlink handler (Vegard Nossum) [Orabug: 35598955] {CVE-2023-3106}
- netfilter: nf_tables: validate registers coming from userspace (Harshvardhan Jha) [Orabug: 34012909] {CVE-2022-1015}
-
Wed Aug 16 2023 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.78.1.el7uek]
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy) [Orabug: 35649493] {CVE-2023-3567}
-
Wed Jul 12 2023 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.77.2.el7uek]
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) [Orabug: 35514108] {CVE-2023-35824}
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai) [Orabug: 35477742] {CVE-2023-31084}
- media: dvb_frontend: fix locking issues at dvb_frontend_get_event() (Mauro Carvalho Chehab) [Orabug: 35477742] {CVE-2023-31084}
- media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820632] {CVE-2022-41218}
- media: dvb: dmx: fixed coding style issues of spacing (devendra sharma) [Orabug: 34820632]
-
Wed Jul 05 2023 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.77.1.el7uek]
- ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng) [Orabug: 35550146] {CVE-2023-3090}
- memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) [Orabug: 35514146] {CVE-2023-3141}
- fbcon: Check font dimension limits (Samuel Thibault) [Orabug: 35493679] {CVE-2023-3161}
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang) [Orabug: 35250538] {CVE-2023-1380}
-
Wed Jun 21 2023 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.76.2.el7uek]
- firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye) [Orabug: 35493606] {CVE-2023-3159}
- ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin) [Orabug: 35448003] {CVE-2022-1679}
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) [Orabug: 35354880] {CVE-2023-2269}
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou) [Orabug: 35181652] {CVE-2023-1118}
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) [Orabug: 35180779] {CVE-2022-3424}
-
Wed Jun 14 2023 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.76.1.el7uek]
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) [Orabug: 35457204] {CVE-2023-34256}
- igmp: Add ip_mc_list lock in ip_check_mc_rcu (Liu Jian) [Orabug: 35448048] {CVE-2022-20141}
-
Wed May 24 2023 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.75.3.el7uek]
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung) [Orabug: 35354791] {CVE-2023-2248}