Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

Mageia: 2021-0102 Critical Update for Kernel-Linus Security Issues

mageia
Calendar Grey March 4, 2021
Dist Mageia Esm H88
Mageia 2021-0102 enhances kernel-linus to address vital security vulnerabilities, improving overall system resilience to attacks.
This kernel-linus update is based on upstream 5.10.19 and fixes atleast the following security issues: An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by...

Summary

This kernel-linus update is based on upstream 5.10.19 and fixes atleast the following security issues:
An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be discarded by later processing, resulting in the caller assuming successful mapping, and hence subsequent operations trying to access space that wasn't mapped. In another case, internal state would be insufficiently updated, preventing safe recovery from the error (CVE-2021-26930).
An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially being at least under the influence of guests (such as out of memory conditions), it isn't correct to assume a plain bug. Memor...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=28471

- https://bugs.mageia.org/show_bug.cgi?id=28415

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.17

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.18

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.19

- https://www.cve.org/CVERecord?id=CVE-2021-26930

- https://www.cve.org/CVERecord?id=CVE-2021-26931

- https://www.cve.org/CVERecord?id=CVE-2021-26932

Resolution

SRPMS

- 8/core/kernel-linus-5.10.19-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 04 Mar 2021
URL: https://advisories.mageia.org/MGASA-2021-0102.html
Type: security
CVE: CVE-2021-26930, CVE-2021-26931, CVE-2021-26932

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here