[Oraclevm-errata] OVMSA-2023-0024 Important: Oracle VM 3 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle VM]

Oracle VM Security Advisory OVMSA-2023-0024

The following updated rpms for Oracle VM 3 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-4.1.12-124.80.1.el6uek.x86_64.rpm
kernel-uek-firmware-4.1.12-124.80.1.el6uek.noarch.rpm



Related CVEs:

CVE-2023-40283
CVE-2023-4208




Description of changes:

[4.1.12-124.80.1.el6uek]
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim)  [Orabug: 35814478]  {CVE-2023-40283}
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis)  [Orabug: 35814297]  {CVE-2023-4208}
- RDMA/core: net: fix kernel NULL error (Zhu Yanjun)  [Orabug: 35723252]