{"id":"CLSA-2021-1634922728","summary":"Fixed 22 CVEs in kernel","details":"- ELS-138: netfilter: x_tables: add missing tables zeroing\n- ELS-138: CVE-2021-33909: seq_file: disallow extremely large seq buffer allocation\n- ELS-138: CVE-2021-22555: netfilter: x_tables: fix compat match/target pad out-of-bound write\n- ELS-138: CVE-2020-29661: tty: Fix -\u003epgrp locking in tiocspgrp()\n- ELS-138: CVE-2020-25656: vt: keyboard, extend func_buf_lock to readers\n- ELS-138: CVE-2020-25656: tty/vt: fix write/write race in ioctl(KDSKBSENT) handler\n- ELS-138: CVE-2020-25656: vt: keyboard, simplify vt_kdgkbsent\n- ELS-138: CVE-2020-25211: netfilter: ctnetlink: add a range check for l3/l4 protonum\n- ELS-138: CKSIX-276: CVE-2019-19532: HID: Fix assumption that devices have inputs\n- ELS-138: CVE-2021-27365: scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE\n- ELS-138: CVE-2021-27365: scsi: iscsi: Verify lengths on passthrough PDUs\n- ELS-138: CVE-2021-27363: CVE-2021-27364: scsi: iscsi: Restrict sessions and handles to admin capabilities\n- ELS-138: sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output\n- ELS-138: USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data\n- ELS-138: CVE-2019-14615: drm/i915/gen9: Clear residual context state on context switch\n- ELS-138: CVE-2020-8647, CVE-2020-8649: vgacon: Fix a UAF in vgacon_invert_region\n- ELS-138: CVE-2020-14331: vgacon: Fix for missing check in scrollback handling\n- ELS-138: CVE-2021-3347: futex: Handle faults correctly for PI futexes\n- ELS-138: CVE-2021-3347: futex: Provide and use pi_state_update_owner()\n- ELS-138: KEYS: allow reaching the keys quotas exactly\n- ELS-138: KEYS: reaching the keys quotas correctly\n- ELS-138: fix -ENOMEM result with invalid user space pointer in sendto() syscall\n- ELS-138: CVE-2017-18344: posix-timer: Properly check sigevent-\u003esigev_notify\n- ELS-138: CVE-2018-6927: futex: Prevent overflow by strengthen input validation\n- ELS-138: CVE-2017-6951: KEYS: Change the name of the dead type to \".dead\" to prevent user access\n- ELS-138: CVE-2017-15299: KEYS: don't let add_key() update an uninstantiated key\n- ELS-138: fix CVE-2016-9604\n- ELS-138: KEYS: add missing permission check for request_key() destination\n- ELS-138: CVE-2017-10661: timerfd: Protect the might cancel mechanism proper\n- ELS-138: fix CVE-2017-7472\n- ELS-138: fix CVE-2017-15274","modified":"2026-05-27T11:36:27.347064288Z","published":"2021-10-22T17:12:08Z","upstream":["CVE-2016-9604","CVE-2017-10661","CVE-2017-15274","CVE-2017-15299","CVE-2017-18344","CVE-2017-6951","CVE-2017-7472","CVE-2018-6927","CVE-2019-14615","CVE-2019-19532","CVE-2020-14331","CVE-2020-25211","CVE-2020-25656","CVE-2020-29661","CVE-2020-8647","CVE-2020-8649","CVE-2021-22555","CVE-2021-27363","CVE-2021-27364","CVE-2021-27365","CVE-2021-3347","CVE-2021-33909"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ol6/CLSA-2021-1634922728.html"}],"affected":[{"package":{"name":"kernel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.2.el6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1634922728.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-debug?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.2.el6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1634922728.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.2.el6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1634922728.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-devel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.2.el6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1634922728.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-headers?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.2.el6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1634922728.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/perf?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.2.el6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1634922728.json"}},{"package":{"name":"python-perf","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/python-perf?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.2.el6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1634922728.json"}}],"schema_version":"1.7.5"}