Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE Linux Enterprise 12 SP5: 2021:1250-1 Critical Kernel Security Patch

suse
Calendar Grey April 16, 2021
Scroller Suse
Crucial Red Hat Security Patch resolves 7 vulnerabilities in the operating system's kernel, enhancing robustness and safeguarding against potential threats.
An update that solves 9 vulnerabilities and has 5 fixes is now available

Summary

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25670, CVE-2020-25671, CVE-2020-25672, CVE-2020-25673: Fixed multiple bugs in NFC subsytem (bsc#1178181). - CVE-2020-36311: Fixed a denial of service (soft lockup) by triggering destruction of a large SEV VM (bsc#1184511). - CVE-2021-29154: Fixed incorrect computation of branch displacements, allowing arbitrary code execution (bsc#1184391). - CVE-2021-30002: Fixed a memory leak for large arguments in video_usercopy (bsc#1184120). - CVE-2021-3483: Fixed a use-after-free in nosy.c (bsc#1184393). - CVE-2021-20219: Fixed a denial of service in n_tty_receive_char_special (bsc#1184397). The following non-security bugs were fixed:

Topics%20covered

Topics Covered

security advisory denial of service kernel update security fix important memory leak SUSE Linux

References

#1065729 #1113295 #1178181 #1181507 #1183405

#1183755 #1184120 #1184170 #1184391 #1184393

#1184397 #1184494 #1184511 #1184583

Cross- CVE-2020-25670 CVE-2020-25671 CVE-2020-25672

CVE-2020-25673 CVE-2020-36311 CVE-2021-20219

CVE-2021-29154 CVE-2021-30002 CVE-2021-3483

CVSS scores:

CVE-2020-25670 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2020-25671 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2020-25672 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2020-25673 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

CVE-2020-36311 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-20219 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:1248-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service kernel update security fix important memory leak SUSE Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.