Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE Linux Enterprise: 12 SP5 Important Kernel Update for Security Fixes

suse
Calendar Grey April 20, 2021
Scroller Suse
SUSE Security Patch addresses 9 kernel vulnerabilities, enhancing user device safety and reliability. Critical announcement
An update that solves 9 vulnerabilities and has 8 fixes is now available

Summary

The SUSE Linux Enterprise 12 SP5 kernel RT was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-29154: Fixed incorrect computation of branch displacements, allowing arbitrary code execution (bsc#1184391). - CVE-2020-25670, CVE-2020-25671, CVE-2020-25672, CVE-2020-25673: Fixed multiple bugs in NFC subsytem (bsc#1178181). - CVE-2020-36311: Fixed a denial of service (soft lockup) by triggering destruction of a large SEV VM (bsc#1184511). - CVE-2021-3483: Fixed a use-after-free in nosy.c (bsc#1184393). - CVE-2021-30002: Fixed a memory leak for large arguments in video_usercopy (bsc#1184120). - CVE-2021-20219: Fixed a denial of service in n_tty_receive_char_special (bsc#1184397). The following non-security bugs were fixed:

Topics%20covered

Topics Covered

security advisory kernel update DoS arbitrary code execution patch important fix SUSE Linux

References

#1065729 #1113295 #1178181 #1181507 #1181674

#1183405 #1183662 #1183755 #1184114 #1184120

#1184170 #1184391 #1184393 #1184397 #1184494

#1184511 #1184583

Cross- CVE-2020-25670 CVE-2020-25671 CVE-2020-25672

CVE-2020-25673 CVE-2020-36311 CVE-2021-20219

CVE-2021-29154 CVE-2021-30002 CVE-2021-3483

CVSS scores:

CVE-2020-25670 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2020-25671 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2020-25672 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2020-25673 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

CVE-2020-36311 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-20219 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:1266-1
Rating: important

Topics%20covered

Topics Covered

security advisory kernel update DoS arbitrary code execution patch important fix SUSE Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.