Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

Mageia 8: MGASA-2021-0456 Moderate: Kernel-Linux Local Privilege Elevation

mageia
Calendar Grey July 22, 2021
Dist Mageia Esm H88
Kernel-release update MGASA-2021-0451 tackles various vulnerabilities, improving overall system robustness and enhancing protection.
This kernel-linus update is based on upstream 5.10.52 and fixes atleast the following security issues: There is a race condition in net/can/bcm.c that can lead to local privilege ...

Summary

This kernel-linus update is based on upstream 5.10.52 and fixes atleast the following security issues:
There is a race condition in net/can/bcm.c that can lead to local privilege escalation to root (CVE-2021-3609).
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user (CVE-2021-33909).
For other upstream fixes, see the referenced changelogs.

References

- https://bugs.mageia.org/show_bug.cgi?id=29272

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.49

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.50

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.51

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.52

- https://www.openwall.com/lists/oss-security/2021/06/19/1

- https://www.openwall.com/lists/oss-security/2021/07/20/1

- https://www.cve.org/CVERecord?id=CVE-2021-3609

- https://www.cve.org/CVERecord?id=CVE-2021-33909

Topics%20covered

Topics Covered

security advisory security issue kernel update moderate severity local escalation Mageia

Resolution

SRPMS

- 8/core/kernel-linus-5.10.52-1.mga8

Publication date: 22 Jul 2021
URL: https://advisories.mageia.org/MGASA-2021-0367.html
Type: security
CVE: CVE-2021-3609, CVE-2021-33909

Topics%20covered

Topics Covered

security advisory security issue kernel update moderate severity local escalation Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.