[Oraclevm-errata] OVMSA-2024-0015 Important: Oracle VM 3 Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle VM]

Oracle VM Security Advisory OVMSA-2024-0015

The following updated rpms for Oracle VM 3 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-4.1.12-124.91.3.el6uek.x86_64.rpm
kernel-uek-firmware-4.1.12-124.91.3.el6uek.noarch.rpm



Related CVEs:

CVE-2022-48804
CVE-2022-48760
CVE-2023-6606




Description of changes:

[4.1.12-124.91.3.el6uek]
- nfs_atomic_open(): prevent parallel nfs_lookup() on a negative hashed (Al Viro)  [Orabug: 37006239]

[4.1.12-124.91.2.el6uek]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang)  [Orabug: 37035560]

[4.1.12-124.91.1.el6uek]
- vt_ioctl: fix array_index_nospec in vt_setactivate (Jakob Koschel)  [Orabug: 37101899]  {CVE-2022-48804}
- tty: vt_ioctl: fix potential Spectre v1 (Gustavo A. R. Silva)  [Orabug: 37101899]  {CVE-2022-48804}
- USB: core: Fix hang in usb_kill_urb by adding memory barriers (Alan Stern)  [Orabug: 37101883]  {CVE-2022-48760}
- smb: client: fix OOB in smbCalcSize() (Paulo Alcantara)  [Orabug: 36165420]  {CVE-2023-6606}