This kernel update is based on upstream 5.10.43 and fixes atleast the
following security issues:
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and
WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received
fragments be cleared from memory after (re)connecting to a network. Under
the right circumstances, when another device sends fragmented frames
encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary
network packets and/or exfiltrate user data (CVE-2020-24586).
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and
WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments
of a frame are encrypted under the same key. An adversary can abuse this to
decrypt selected fragments when another device sends fragmented frames and
the WEP, CCMP, or GCMP encryption key is periodically renewed
(CVE-2020-24587).
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and
WPA3) and Wired Equi...
- https://bugs.mageia.org/show_bug.cgi?id=29106
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.42
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.43
- https://xenbits.xen.org/xsa/advisory-374.html
- https://www.cve.org/CVERecord?id=CVE-2020-24586
- https://www.cve.org/CVERecord?id=CVE-2020-24587
- https://www.cve.org/CVERecord?id=CVE-2020-24588
- https://www.cve.org/CVERecord?id=CVE-2020-26139
- https://www.cve.org/CVERecord?id=CVE-2020-26141
- https://www.cve.org/CVERecord?id=CVE-2020-26145
- https://www.cve.org/CVERecord?id=CVE-2020-26147
- https://www.cve.org/CVERecord?id=CVE-2021-3573
- https://www.cve.org/CVERecord?id=CVE-2021-3587
- https://www.cve.org/CVERecord?id=CVE-2021-28691
- 7/core/kernel-5.10.43-1.mga7
- 7/core/kmod-virtualbox-6.1.22-1.6.mga7
- 7/core/kmod-xtables-addons-3.13-28.mga7
- 8/core/kernel-5.10.43-1.mga8
- 8/core/kmod-virtualbox-6.1.22-1.6.mga8
- 8/core/kmod-xtables-addons-3.18-1.6.mga8
Get the latest Linux and open source security news straight to your inbox.