A new kernel update has been released for Oracle Linux 7
Oracle Linux Security Advisory ELSA-2018-4189Unbreakable Enterprise kernel Security Update for Oracle Linux 7
http://linux.oracle.com/errata/ELSA-2018-4189.html
The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:
x86_64:
kernel-uek-4.14.35-1818.0.14.el7uek.x86_64.rpm
kernel-uek-debug-4.14.35-1818.0.14.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.14.35-1818.0.14.el7uek.x86_64.rpm
kernel-uek-devel-4.14.35-1818.0.14.el7uek.x86_64.rpm
kernel-uek-tools-4.14.35-1818.0.14.el7uek.x86_64.rpm
kernel-uek-doc-4.14.35-1818.0.14.el7uek.noarch.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.14.35-1818.0.14.el7uek.src.rpm
Description of changes:
[4.14.35-1818.0.14.el7uek]
- tcp: add tcp_ooo_try_coalesce() helper (Eric Dumazet) [Orabug:
28453849] {CVE-2018-5390}
- tcp: call tcp_drop() from tcp_data_queue_ofo() (Eric Dumazet)
[Orabug: 28453849] {CVE-2018-5390}
- tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Eric
Dumazet) [Orabug: 28453849] {CVE-2018-5390}
- tcp: avoid collapses in tcp_prune_queue() if possible (Eric Dumazet)
[Orabug: 28453849] {CVE-2018-5390}
- tcp: free batches of packets in tcp_prune_ofo_queue() (Eric Dumazet)
[Orabug: 28453849] {CVE-2018-5390}