openSUSE 15.2: 2021:1357-1 Critical Kernel Fixes for DoS and More
opensuse
October 15, 2021
An update that solves 6 vulnerabilities and has 43 fixes is now available
Description
The openSUSE Leap 15.2 kernel was updated to receive various security and
bugfixes.
The following security bugs were fixed:
- CVE-2020-3702: Specifically timed and handcrafted traffic can cause
internal errors in a WLAN device that lead to improper layer 2 Wi-Fi
encryption with a consequent possibility of information disclosure over
the air for a discrete set of traffic (bnc#1191193).
- CVE-2021-3669: Fixed a denial of service to replace costly bailout check
in sysvipc_find_ipc() (bsc#1159886 bsc#1188986).
- CVE-2021-3752: Fixed a use-after-free uaf bug in bluetooth
(bsc#1190023).
- CVE-2021-40490: A race condition was discovered in
ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in
the Linux kernel (bnc#1190159)
- CVE-2021-3744, CVE-2021-3764: Fixed some resource leaks in the ccp
driver ccp_run_aes_gcm_cmd() (bsc#1189884 bsc#1190534).
The following non-security bugs were fixed:
- ALSA:...
Read the Full Advisory
Topics Covered
Patch
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.2:
zypper in -t patch openSUSE-2021-1357=1
Package List
- openSUSE Leap 15.2 (noarch):
kernel-devel-5.3.18-lp152.95.1
kernel-docs-5.3.18-lp152.95.1
kernel-docs-html-5.3.18-lp152.95.1
kernel-macros-5.3.18-lp152.95.1
kernel-source-5.3.18-lp152.95.1
kernel-source-vanilla-5.3.18-lp152.95.1
- openSUSE Leap 15.2 (x86_64):
kernel-debug-5.3.18-lp152.95.1
kernel-debug-debuginfo-5.3.18-lp152.95.1
kernel-debug-debugsource-5.3.18-lp152.95.1
kernel-debug-devel-5.3.18-lp152.95.1
kernel-debug-devel-debuginfo-5.3.18-lp152.95.1
kernel-default-5.3.18-lp152.95.1
kernel-default-base-5.3.18-lp152.95.1.lp152.8.44.1
kernel-default-base-rebuild-5.3.18-lp152.95.1.lp152.8.44.1
kernel-default-debuginfo-5.3.18-lp152.95.1
kernel-default-debugsource-5.3.18-lp152.95.1
kernel-default-devel-5.3.18-lp152.95.1
kernel-default-devel-debuginfo-5.3.18-lp152.95.1
kernel-kvmsmall-5.3.18-lp152.95.1
kernel-kvmsmall-debuginfo-5.3.18-lp152.95.1
kernel-kvmsmall-debugsource-5.3.18-lp152.95.1
kernel-kvmsmall-devel-5.3.18-lp152.95.1
kernel-kvmsmall-devel-debuginfo-5.3.18-lp152.95.1
kernel-obs-build-5.3.18-lp152.9...
Read the Full AdvisoryReferences
https://www.suse.com/security/cve/CVE-2020-3702.html
https://www.suse.com/security/cve/CVE-2021-3669.html
https://www.suse.com/security/cve/CVE-2021-3744.html
https://www.suse.com/security/cve/CVE-2021-3752.html
https://www.suse.com/security/cve/CVE-2021-3764.html
https://www.suse.com/security/cve/CVE-2021-40490.html
https://bugzilla.suse.com/1065729
https://bugzilla.suse.com/1148868
https://bugzilla.suse.com/1152489
https://bugzilla.suse.com/1154353
https://bugzilla.suse.com/1159886
https://bugzilla.suse.com/1167773
https://bugzilla.suse.com/1170774
https://bugzilla.suse.com/1173746
https://bugzilla.suse.com/1176940
https://bugzilla.suse.com/1184439
https://bugzilla.suse.com/1184804
https://bugzilla.suse.com/1185302
https://bugzilla.suse.com/1185677
https://bugzilla.suse.com/1185726
https://bugzilla.suse.com/1185762
https://bugzilla.suse.com/1187167
https://bugzilla.suse.com/1188067
https://bugzilla.suse.com/1188651
https://bugzilla.suse.com/1188986
https://bugzilla.suse.com/1189297
https://bugzilla.suse.com/1...
Read the Full Advisory
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2021:1357-1
Rating: important
Affected Products:
openSUSE Leap 15.2
ble.
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!