elsa-2024-12258

oracle_linux
Description

[4.1.12-124.84.2] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36251327] {CVE-2024-1086} [4.1.12-124.84.1] - mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga) [Orabug: 36334311] - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai) [Orabug: 35924076] {CVE-2023-45863} - kobject: Replace strncpy with memcpy (Guenter Roeck) [Orabug: 35924076] - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) [Orabug: 35923517] {CVE-2023-39194} - net/xfrm: use kmemdup rather than duplicating its implementation (Andrzej Hajda) [Orabug: 35923517]

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2023-39194",
    "CVE-2023-45863",
    "CVE-2024-1086"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[4.1.12-124.84.2]\n- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)  [Orabug: 36251327]  {CVE-2024-1086}\n\n[4.1.12-124.84.1]\n- mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334311] \n- kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai)  [Orabug: 35924076]  {CVE-2023-45863}\n- kobject: Replace strncpy with memcpy (Guenter Roeck)  [Orabug: 35924076] \n- net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma)  [Orabug: 35923517]  {CVE-2023-39194}\n- net/xfrm: use kmemdup rather than duplicating its implementation (Andrzej Hajda)  [Orabug: 35923517]",
  "id": "ELSA-2024-12258",
  "ovalId": "oval:com.oracle.elsa:def:202412258",
  "source": "oracle_linux",
  "title": "ELSA-2024-12258: Unbreakable Enterprise kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2024-12258.html"
}
View JSON API Download JSON