elsa-2019-4531

oracle_linux
Description

[4.1.12-124.25.1] - x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR (Tom Lendacky) [Orabug: 28870524] {CVE-2018-3639} - x86/bugs: Add AMD's SPEC_CTRL MSR usage (Konrad Rzeszutek Wilk) [Orabug: 28870524] {CVE-2018-3639} - x86/cpufeatures: rename X86_FEATURE_AMD_SSBD to X86_FEATURE_LS_CFG_SSBD (Mihai Carabas) [Orabug: 28870524] {CVE-2018-3639} - Make file credentials available to the seqfile interfaces (Linus Torvalds) [Orabug: 29114879] {CVE-2018-17972} - proc: restrict kernel stack dumps to root (Jann Horn) [Orabug: 29114879] {CVE-2018-17972} - x86/speculation: Clean up retpoline code in bugs.c (Alejandro Jimenez) [Orabug: 29211617] - x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE (WANG Chao) [Orabug: 29211617] - x86/build: Fix compiler support check for CONFIG_RETPOLINE (Masahiro Yamada) [Orabug: 29211617] - x86/retpoline: Remove minimal retpoline support (Zhenzhong Duan) [Orabug: 29211617] - x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support (Zhenzhong Duan) [Orabug: 29211617] - nl80211: check for the required netlink attributes presence (Vladis Dronov) [Orabug: 29245533] {CVE-2017-12153} {CVE-2017-12153} - scsi: lpfc: Fix PT2PT PRLI reject (reapply patch) (James Smart) [Orabug: 29281346]

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2018-3639",
    "CVE-2017-12153",
    "CVE-2018-17972"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[4.1.12-124.25.1]\n- x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR (Tom Lendacky)  [Orabug: 28870524]  {CVE-2018-3639}\n- x86/bugs: Add AMD's SPEC_CTRL MSR usage (Konrad Rzeszutek Wilk)  [Orabug: 28870524]  {CVE-2018-3639}\n- x86/cpufeatures: rename X86_FEATURE_AMD_SSBD to X86_FEATURE_LS_CFG_SSBD (Mihai Carabas)  [Orabug: 28870524]  {CVE-2018-3639}\n- Make file credentials available to the seqfile interfaces (Linus Torvalds)  [Orabug: 29114879]  {CVE-2018-17972}\n- proc: restrict kernel stack dumps to root (Jann Horn)  [Orabug: 29114879]  {CVE-2018-17972}\n- x86/speculation: Clean up retpoline code in bugs.c (Alejandro Jimenez)  [Orabug: 29211617] \n- x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE (WANG Chao)  [Orabug: 29211617] \n- x86/build: Fix compiler support check for CONFIG_RETPOLINE (Masahiro Yamada)  [Orabug: 29211617] \n- x86/retpoline: Remove minimal retpoline support (Zhenzhong Duan)  [Orabug: 29211617] \n- x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support (Zhenzhong Duan)  [Orabug: 29211617] \n- nl80211: check for the required netlink attributes presence (Vladis Dronov)  [Orabug: 29245533]  {CVE-2017-12153} {CVE-2017-12153}\n- scsi: lpfc: Fix PT2PT PRLI reject (reapply patch) (James Smart)  [Orabug: 29281346]",
  "id": "ELSA-2019-4531",
  "ovalId": "oval:com.oracle.elsa:def:20194531",
  "source": "oracle_linux",
  "title": "ELSA-2019-4531: Unbreakable Enterprise kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2019-4531.html"
}
View JSON API Download JSON