[ol7_UEKR4] kernel-uek-4.1.12-124.87.2.2.el7uek.x86_64

The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.

Changelog (Show File list) (Show related packages)

• Mon Jul 15 2024 Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.87.2.2.el7uek]

  - net/mlx5e: drop shorter ethernet frames (Manjunath Patil)  [Orabug: 36660755]

• Tue Jun 18 2024 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.87.2.el7uek]

  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet)  [Orabug: 35250827]  {CVE-2023-0590}

• Wed Jun 12 2024 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.87.1.el7uek]

  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)  [Orabug: 36654101]  {CVE-2023-6932} 
  - net: convert ip_mc_list.refcnt from atomic_t to refcount_t (Reshetova, Elena)  [Orabug: 36654101]  
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic)  [Orabug: 35810544]  {CVE-2023-4623} 
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith)  [Orabug: 35754477]  {CVE-2023-1206}

• Tue May 07 2024 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.86.1.el7uek]

  - ext4: fix corruption during on-line resize (Maximilian Heyne)  [Orabug: 36574734]  
  - exec, elf: ignore malformed note segments (Anthony Yznaga)  [Orabug: 36524980]

• Wed Apr 10 2024 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.85.1.el7uek]

  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang)  [Orabug: 35282809]  {CVE-2023-1989}

• Mon Apr 01 2024 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.84.2.el7uek]

  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)  [Orabug: 36251327]  {CVE-2024-1086}

• Tue Mar 05 2024 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.84.1.el7uek]

  - mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334311]  
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai)  [Orabug: 35924076]  {CVE-2023-45863} 
  - kobject: Replace strncpy with memcpy (Guenter Roeck)  [Orabug: 35924076]  
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma)  [Orabug: 35923517]  {CVE-2023-39194} 
  - net/xfrm: use kmemdup rather than duplicating its implementation (Andrzej Hajda)  [Orabug: 35923517]

• Tue Feb 20 2024 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.83.2.el7uek]

  - Input: add bounds checking to input_set_capability() (Jeff LaBundy)  [Orabug: 36192120]  {CVE-2022-48619} 
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua)  [Orabug: 36155598]  {CVE-2023-7192}

• Tue Feb 13 2024 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.83.1.el7uek]

  - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o)  [Orabug: 36229451]  {CVE-2024-0775} 
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim)  [Orabug: 36229396]  {CVE-2023-51780} 
  - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails (Thadeu Lima de Souza Cascardo)  [Orabug: 36229182]  {CVE-2021-34981}

• Tue Jan 23 2024 Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.82.2.el7uek]

  - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi)  [Orabug: 35959598]  {CVE-2020-26555} 
  - sched/rt: pick_next_rt_entity(): check list_entry (Pietro Borrello)  [Orabug: 35181560]  {CVE-2023-1077} 
  - sched/debug: Fix SCHED_WARN_ON() to return a value on !CONFIG_SCHED_DEBUG as well (Ingo Molnar)  [Orabug: 35181560]  
  - sched/debug: Add SCHED_WARN_ON() (Peter Zijlstra)  [Orabug: 35181560]