Oracle alert ELSA-2024-12354 (kernel)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] New Ksplice updates for UEKR4 4.1.12 on OL6 and OL7 (ELSA-2024-12354) | |
| Date: | Mon, 13 May 2024 11:30:34 +0200 | |
| Message-ID: | <mailman.112.1715592735.4813.el-errata@oss.oracle.com> |
Synopsis: ELSA-2024-12354 can now be patched using Ksplice CVEs: CVE-2023-1989 Users with Oracle Linux Premier Support can now use Ksplice to patch against the latest Oracle Linux Security Advisory, ELSA-2024-12354. More information about this errata can be found at https://linux.oracle.com/errata/ELSA-2024-12354.html INSTALLING THE UPDATES We recommend that all users of Ksplice Uptrack running UEKR4 4.1.12 on OL6 and OL7 install these updates. On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf, these updates will be installed automatically and you do not need to take any action. Alternatively, you can install these updates by running: # /usr/sbin/uptrack-upgrade -y DESCRIPTION * CVE-2023-1989: Denial-of-service when unloading the Bluetooth SDIO driver. A missing clean-up routine to cancel a timer when removing a Bluetooth SDIO could lead to a use-after-free. A local, privileged user could use this flaw to cause a denial-of-service. Orabug: 35282809 SUPPORT Ksplice support is available at ksplice-support_ww@oracle.com. _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata