Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

SUSE: 2021:1373-1 Important: Kernel Live Patch 36 Critical Flaws

suse
Calendar Grey April 28, 2021
Scroller Suse
A vital security enhancement for the SUSE Linux Kernel resolves multiple significant security flaws. Ensure you update your systems without delay.
An update that fixes three vulnerabilities is now available

Summary

This update for the Linux Kernel 4.4.180-94_135 fixes one issue. The following security issues were fixed: - CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646). - CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294). - CVE-2021-26931: Fixed an issue where Linux kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12-SP3:

Topics%20covered

Topics Covered

security advisory kernel update patch management system patch critical flaw suse

References

#1182294

Cross- CVE-2021-26930 CVE-2021-26931 CVE-2021-28688

CVSS scores:

CVE-2021-26930 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-26930 (SUSE): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CVE-2021-26931 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-26931 (SUSE): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CVE-2021-28688 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected Products:

SUSE Linux Enterprise Server for SAP 12-SP3

SUSE Linux Enterprise Server 12-SP3-LTSS

https://www.suse.com/security/cve/CVE-2021-26930.html

https://www.suse.com/security/cve/CVE-2021-26931.html

https://www.suse.com/security/cve/CVE-2021-28688.html

https://bugzilla.suse.com/1182294

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:1373-1
Rating: important

Topics%20covered

Topics Covered

security advisory kernel update patch management system patch critical flaw suse

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.