Oracle Linux: CVE-2024-38619: ELSA-2024-12610: Unbreakable Enterprise kernel security update (IMPORTANT) (Multiple Advisories)

Oracle Linux: CVE-2024-38619: ELSA-2024-12610: Unbreakable Enterprise kernel security update (IMPORTANT) (Multiple Advisories)

Severity

5

CVSS

(AV:L/AC:L/Au:S/C:N/I:N/A:C)

Published

06/20/2024

Created

10/18/2024

Added

10/16/2024

Modified

01/23/2025

Description

In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struct alauda_info will remain 0 if alauda_init_media() fails, potentially causing divide errors in alauda_read_data() and alauda_write_lba(). - Add a member "media_initialized" to struct alauda_info. - Change a condition in alauda_check_media() to ensure the first initialization. - Add an error check for the return value of alauda_init_media().

Solution(s)

• oracle-linux-upgrade-kernel
• oracle-linux-upgrade-kernel-uek

References

• https://attackerkb.com/topics/cve-2024-38619
• CVE - 2024-38619
• ELSA-2024-12610
• ELSA-2024-12618
• ELSA-2024-12779
• ELSA-2024-7000
• ELSA-2024-12612
• ELSA-2024-6567

View more