Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 526
Alerts This Week
Warning Icon 1 526

SUSE: 2021:1623-1 Important: Kernel Denial Of Service Threat Fix

suse
Calendar Grey May 18, 2021
Scroller Suse
A significant Red Hat security patch resolves 19 vulnerabilities in the Unix core, mitigating potential system compromise risks.
An update that solves 23 vulnerabilities and has 20 fixes is now available

Summary

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bnc#1184509). - CVE-2021-29650: Fixed an issue inside the netfilter subsystem that allowed attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value (bnc#1184208). - CVE-2020-27673: Fixed an issue in Xen where a guest OS users could have caused a denial of service (host OS hang) via a high rate of events to dom0 (bnc#1177411, bnc#1184583). - CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute

Topics%20covered

Topics Covered

security advisory denial of service security update important SUSE system fix Linux kernel

References

#1120163 #1152974 #1152975 #1155179 #1155184

#1155186 #1159483 #1165629 #1165823 #1172247

#1173485 #1176720 #1177411 #1177855 #1177856

#1178181 #1178634 #1179575 #1182047 #1182261

#1182715 #1182716 #1182717 #1183022 #1183069

#1183593 #1184120 #1184167 #1184168 #1184194

#1184198 #1184208 #1184211 #1184391 #1184393

#1184397 #1184509 #1184583 #1184611 #1185248

#1185555 #1185556 #1185557

Cross- CVE-2020-0433 CVE-2020-1749 CVE-2020-25670

CVE-2020-25671 CVE-2020-25672 CVE-2020-25673

CVE-2020-27673 CVE-2020-36312 CVE-2020-36322

CVE-2021-20219 CVE-2021-27363 CVE-2021-27364

CVE-2021-27365 CVE-2021-28038 CVE-2021-28660

CVE-2021-28950 CVE-2021-28972 CVE-2021-29154

CVE-2021-29264 CVE-2021-29265 CVE-2021-29650

...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:1623-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service security update important SUSE system fix Linux kernel

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.