Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

openSUSE: 2021:2409-1 Critical: Kernel Out-of-Bounds Security Issues

opensuse
Calendar Grey July 20, 2021
Dist Opensuse Esm H88
Significant OpenSUSE Kernel Patch: Two vulnerabilities resolved with high-priority corrections. System restart necessary after installation.
An update that solves two vulnerabilities and has 6 fixes is now available

Description

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive

various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-22555: A heap out-of-bounds write affecting Linux since

v2.6.19-rc1 was discovered in net/netfilter/x_tables.c (bnc#1188116 ).

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer

that allows to obtain full root privileges (bsc#1188062).

The following non-security bugs were fixed:

- ceph: must hold snap_rwsem when filling inode for async create

(bsc#1187927).

- cgroup1: do not allow '\n' in renaming (bsc#1187972).

- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470

bsc#1185486).

- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).

- usb: dwc3: Fix debugfs creation flow (git-fixes).

- x86/pkru: Write hardware init value to PKRU when xstate is init

(bsc#1152489).

- x86/process: Check PF_KTHREAD and not current->mm for kernel...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory critical issue security update kernel fix bugfix system reboot openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.3:

zypper in -t patch openSUSE-SLE-15.3-2021-2409=1

Package List

- openSUSE Leap 15.3 (x86_64):

cluster-md-kmp-azure-5.3.18-38.14.1

cluster-md-kmp-azure-debuginfo-5.3.18-38.14.1

dlm-kmp-azure-5.3.18-38.14.1

dlm-kmp-azure-debuginfo-5.3.18-38.14.1

gfs2-kmp-azure-5.3.18-38.14.1

gfs2-kmp-azure-debuginfo-5.3.18-38.14.1

kernel-azure-5.3.18-38.14.1

kernel-azure-debuginfo-5.3.18-38.14.1

kernel-azure-debugsource-5.3.18-38.14.1

kernel-azure-devel-5.3.18-38.14.1

kernel-azure-devel-debuginfo-5.3.18-38.14.1

kernel-azure-extra-5.3.18-38.14.1

kernel-azure-extra-debuginfo-5.3.18-38.14.1

kernel-azure-livepatch-devel-5.3.18-38.14.1

kernel-azure-optional-5.3.18-38.14.1

kernel-azure-optional-debuginfo-5.3.18-38.14.1

kernel-syms-azure-5.3.18-38.14.1

kselftests-kmp-azure-5.3.18-38.14.1

kselftests-kmp-azure-debuginfo-5.3.18-38.14.1

ocfs2-kmp-azure-5.3.18-38.14.1

ocfs2-kmp-azure-debuginfo-5.3.18-38.14.1

reiserfs-kmp-azure-5.3.18-38.14.1

reiserfs-kmp-azure-debuginfo-5.3.18-38.14.1

- openSUSE Leap 15.3 (noarch):

kernel-devel-azure-5.3.18-38.14.1

kernel-source-azure-5.3.18-38.14.1

References

https://www.suse.com/security/cve/CVE-2021-22555.html

https://www.suse.com/security/cve/CVE-2021-33909.html

https://bugzilla.suse.com/1152489

https://bugzilla.suse.com/1182470

https://bugzilla.suse.com/1185486

https://bugzilla.suse.com/1187927

https://bugzilla.suse.com/1187972

https://bugzilla.suse.com/1187980

https://bugzilla.suse.com/1188062

https://bugzilla.suse.com/1188116

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2021:2409-1
Rating: important
Affected Products: openSUSE Leap 15.3 ble.

Topics%20covered

Topics Covered

security advisory critical issue security update kernel fix bugfix system reboot openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here