[El-errata] New Ksplice updates for RHCK 7 (ELSA-2021-2725)

[Errata Announcements for Oracle Linux]

Synopsis: ELSA-2021-2725 can now be patched using Ksplice
CVEs: CVE-2019-20934 CVE-2020-11668 CVE-2021-33033 CVE-2021-33034 CVE-2021-33909

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2021-2725.
More information about this errata can be found at
https://linux.oracle.com/errata/ELSA-2021-2725.html

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running RHCK 7 install
these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* CVE-2021-33034: Use-after-free when tearing down bluetooth HCI channel.

A race condition in the bluetooth Host Controller Interface code could
result in a use-after-free. A malicious device might exploit this to
write data to an arbitrary kernel address, potentially allowing code
execution under control of the device.


* CVE-2020-11668: NULL pointer dereference when initializing Xirlink C-It USB camera device.

A missing check on USB endpoints when initializing Xirlink C-It USB
camera device could lead to a NULL pointer dereference. A local attacker
could use this flaw and a malicious USB device to cause a
denial-of-service.


* CVE-2021-33033: Use-after-free in NetLabel subsystem due to improper reference counting.

A flaw in CIPSO and CALIPSO reference counting scheme of NetLabel packet
labeling framework could lead to a use-after-free. A local use could this
flaw for a code execution or a denial-of-service.


* CVE-2021-33909: Code execution in the virtual file system.

An unsigned to signed integer conversion flaw in the virtual file system
implementation could lead to a system crash. A local attacker could use
this flaw to execute arbitrary code or cause a denial-of-service.


* Ksplice enablement for patching the huge page kernel thread.




* CVE-2019-20934: Use-after-free when reading NUMA statistics concurrently to execve.

A locking error in the function freeing NUMA statistics could lead to a
use-after-free on concurrent read of /proc/pid/sched by userspace.  A
local, unprivileged user could use this flaw to leak information from the
kernel or cause a denial-of-service.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.