vulnerability

Oracle Linux: (CVE-2021-28038) (Multiple Advisories): Unbreakable Enterprise kernel-container security update

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:C)
Published
Mar 5, 2021
Added
Apr 13, 2021
Modified
Aug 6, 2024

Description

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.

Solutions

oracle-linux-upgrade-kernel-uekoracle-linux-upgrade-kernel-uek-containeroracle-linux-upgrade-kernel-uek-container-debugoracle-linux-upgrade-kernel-uek-debugoracle-linux-upgrade-kernel-uek-debug-develoracle-linux-upgrade-kernel-uek-develoracle-linux-upgrade-kernel-uek-docoracle-linux-upgrade-kernel-uek-firmwareoracle-linux-upgrade-kernel-uek-headersoracle-linux-upgrade-kernel-uek-toolsoracle-linux-upgrade-kernel-uek-tools-libsoracle-linux-upgrade-kernel-uek-tools-libs-develoracle-linux-upgrade-perforacle-linux-upgrade-python-perf
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.