Lucene search

K
oraclelinuxOracleLinuxELSA-2023-12232
HistoryApr 04, 2023 - 12:00 a.m.

Unbreakable Enterprise kernel security update

2023-04-0400:00:00
linux.oracle.com
24
enterprise kernel
nf_tables
sctp
hid
uvcvideo
ipv6
security update
cve-2023-1095
cve-2023-1074
cve-2023-1073
cve-2020-0404
cve-2019-5489
cve-2023-0394

0.001 Low

EPSS

Percentile

37.2%

[4.1.12-124.73.2]

  • netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal) [Orabug: 35181628] {CVE-2023-1095}
  • sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) [Orabug: 35181461] {CVE-2023-1074}
  • HID: check empty report_list in hid_validate_values() (Pietro Borrello) [Orabug: 35181168] {CVE-2023-1073}
  • media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (Will Deacon) [Orabug: 35180270] {CVE-2020-0404}
    [4.1.12-124.73.1]
  • mm/mincore.c: make mincore() more conservative (Jiri Kosina) [Orabug: 35133279] {CVE-2019-5489}
  • mm: introduce vma_is_anonymous(vma) helper (Oleg Nesterov) [Orabug: 35133279]
  • Revert ‘Change mincore() to count ‘mapped’ pages rather than ‘cached’ pages’ (Linus Torvalds) [Orabug: 35124616]
  • ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005831] {CVE-2023-0394}