{"cves":["CVE-2023-39194","CVE-2023-45863","CVE-2024-1086"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[4.1.12-124.84.2]\n- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)  [Orabug: 36251327]  {CVE-2024-1086}\n\n[4.1.12-124.84.1]\n- mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334311] \n- kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai)  [Orabug: 35924076]  {CVE-2023-45863}\n- kobject: Replace strncpy with memcpy (Guenter Roeck)  [Orabug: 35924076] \n- net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma)  [Orabug: 35923517]  {CVE-2023-39194}\n- net/xfrm: use kmemdup rather than duplicating its implementation (Andrzej Hajda)  [Orabug: 35923517]","id":"ELSA-2024-12258","ovalId":"oval:com.oracle.elsa:def:202412258","source":"oracle_linux","title":"ELSA-2024-12258: Unbreakable Enterprise kernel security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2024-12258.html"}