Release Info

Advisory: CLSA-2024:1728935304

OS: CentOS 7 ELS

Public date: 2024-10-14 15:48:26

Project: kernel

Version: 3.10.0-1160.119.1.el7.tuxcare.els10

Errata link: https://errata.tuxcare.com/els_os/centos7els/CLSA-2024-1728935304.html

Changelog

- xfs: don't walk off the end of a directory data block {CVE-2024-41013} - net/sched: cls_u32: fix netns refcount changes in u32_change() {CVE-2022-29581} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - openvswitch: fix OOB access in reserve_sfa_size() {CVE-2022-2639} - net: sched: fix use-after-free in tc_new_tfilter() {CVE-2022-1055} - wifi: cfg80211: fix BSS refcounting bugs {CVE-2022-42720} - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() {CVE-2022-41674} - igmp: Add ip_mc_list lock in ip_check_mc_rcu {CVE-2022-20141} - af_key: Do not call xfrm_probe_algs in parallel {CVE-2022-3028} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - Squashfs: sanity check symbolic link size {CVE-2024-46744}

Update

Update command: yum update kernel*

Packages list

bpftool-3.10.0-1160.119.1.el7.tuxcare.els10.x86_64.rpm kernel-3.10.0-1160.119.1.el7.tuxcare.els10.x86_64.rpm kernel-debug-3.10.0-1160.119.1.el7.tuxcare.els10.x86_64.rpm kernel-debug-devel-3.10.0-1160.119.1.el7.tuxcare.els10.x86_64.rpm kernel-devel-3.10.0-1160.119.1.el7.tuxcare.els10.x86_64.rpm kernel-headers-3.10.0-1160.119.1.el7.tuxcare.els10.x86_64.rpm kernel-tools-3.10.0-1160.119.1.el7.tuxcare.els10.x86_64.rpm kernel-tools-libs-3.10.0-1160.119.1.el7.tuxcare.els10.x86_64.rpm kernel-tools-libs-devel-3.10.0-1160.119.1.el7.tuxcare.els10.x86_64.rpm perf-3.10.0-1160.119.1.el7.tuxcare.els10.x86_64.rpm python-perf-3.10.0-1160.119.1.el7.tuxcare.els10.x86_64.rpm

CVEs

CVE-2022-1055
CVE-2022-3028
CVE-2022-2639
CVE-2022-42720
CVE-2022-41674
CVE-2024-46744
CVE-2024-41013
CVE-2024-46818
CVE-2024-46813
CVE-2022-20368
CVE-2022-20141
CVE-2022-29581