[Oraclevm-errata] OVMSA-2023-0016 Important: Oracle VM 3 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel bug fix update

[Errata Announcements for Oracle VM]

Oracle VM Security Advisory OVMSA-2023-0016

The following updated rpms for Oracle VM 3 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-4.1.12-124.75.3.el6uek.x86_64.rpm
kernel-uek-firmware-4.1.12-124.75.3.el6uek.noarch.rpm



Related CVEs:

CVE-2022-3169
CVE-2023-0458
CVE-2023-1670
CVE-2023-2162
CVE-2023-2248
CVE-2023-23454
CVE-2023-28328




Description of changes:

[4.1.12-124.75.3.el6uek]
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung)  [Orabug: 35354791]  {CVE-2023-2248}

[4.1.12-124.75.2.el6uek]
- prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman)  [Orabug: 35354303]  {CVE-2023-0458}
- kernel/sys.c: fix potential Spectre v1 issue (Gustavo A. R. Silva)  [Orabug: 35354303]
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang)  [Orabug: 35250898]  {CVE-2023-1670}
- net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim)  [Orabug: 34983586]  {CVE-2023-23454}

[4.1.12-124.75.1.el6uek]
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong)  [Orabug: 35312830]  {CVE-2023-28328}
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie)  [Orabug: 35312683]  {CVE-2023-2162}
- nvme: restrict management ioctls to admin (Keith Busch)  [Orabug: 34619368]  {CVE-2022-3169}

[4.1.12-124.74.2.el6uek]
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman)  [Orabug: 35250098]  {CVE-2023-1513}
- staging: rtl8712: fix use after free bugs (Dan Carpenter)  [Orabug: 35212876]  {CVE-2022-4095}
- staging: rtl8712: rtl8712_cmd.c: fixed comparison to null (Juliana Rodrigues)  [Orabug: 35212876]  {CVE-2022-4095}
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich)  [Orabug: 35037715]  {CVE-2023-23559}

[4.1.12-124.74.1.el6uek]
- seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou)  [Orabug: 35217595]  {CVE-2023-28772}
- net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski)  [Orabug: 35181964]  {CVE-2023-26545}