New Ksplice updates for UEKR3 3.8.13 are available for Oracle Linux 6 and 7
Synopsis: ELSA-2019-4854 can now be patched using Ksplice
CVEs: CVE-2017-14991 CVE-2017-15102 CVE-2017-18551 CVE-2018-20169 CVE-2019-14284
Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2019-4854.
More information about this errata can be found at
https://linux.oracle.com/errata/ELSA-2019-4854.html
INSTALLING THE UPDATES
We recommend that all users of Ksplice Uptrack running UEKR3 3.8.13 on
OL6 and OL7 install these updates.
On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.
Alternatively, you can install these updates by running:
# /usr/sbin/uptrack-upgrade -y
DESCRIPTION
* CVE-2017-18551: Out-of-bounds access when reading data over I2C bus.
A missing check on user input when reading data over I2C bus could lead
to an out-of-bounds access. A local attacker could use this flaw to
cause a denial-of-service.
Orabug: 30468842
* CVE-2019-14284: Denial-of-service in floppy disk formatting.
A division by zero in the setup_format_params function for the floppy
disk driver could result in a kernel crash. A local user with access to
the floppy disk device could use this flaw to crash the system.
Orabug: 30447844
* CVE-2017-15102: NULL pointer dereference when probing Lego Mindstorms infrared device.
A race condition when probing Lego Mindstorms infrared device can trigger
a NULL pointer dereference and cause a local denial of service.
Orabug: 30412151
* CVE-2017-14991: Information leak in SCSI Generic Support driver.
Failing to initialize buffer when performing ioctl call for /dev/sg0
results in stale kernel data leaked into userspace. This allows local
users to obtain sensitive information about kernel heap memory.
Orabug: 30393902
* CVE-2018-20169: Missing bound check when reading extra USB descriptors.
A failure to properly check the minimum and maximum size of an extra USB
descriptor in the USB sub-system could lead to reading or writing past
memory bounds. An attacker with the ability to send specially crafted
extra descriptors from a USB device could use this flaw to escalate
privileges or cause a denial-of-service.
Orabug: 30045797
SUPPORT
Ksplice support is available at ksplice-support_ww@oracle.com.
