Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

SUSE: 2021:2198-1 Important Security Update for Linux Kernel Live Patch

suse
Calendar Grey June 30, 2021
Scroller Suse
SUSE has issued a security update for its Linux Kernel, responding to a range of critical security concerns and vulnerabilities that impact SLE 15 SP3.
An update that solves 7 vulnerabilities and has one errata is now available

Summary

This update for the Linux Kernel 5.3.18-57 fixes several issues. The following issues were fixed: - CVE-2021-3489: Fixed an issue where the eBPF RINGBUF bpf_ringbuf_reserve did not check that the allocated size was smaller than the ringbuf size (bsc#1185640). - CVE-2021-3490: Fixed an issue where the eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) did not update the 32-bit bounds (bsc#1185641). - CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111). - CVE-2021-32399: Fixed a race condition when removing the HCI controller (bsc#1184611). - CVE-2020-36322: Fixed an issue was discovered in FUSE filesystem implementation which could have caused a system crash (bsc#1184211).

Topics%20covered

Topics Covered

security advisory important suse severe linux kernel solution live patch

References

#1183658 #1184710 #1184952 #1185796 #1185847

#1185856 #1185899 #1186285

Cross- CVE-2020-36322 CVE-2021-28660 CVE-2021-29154

CVE-2021-32399 CVE-2021-33034 CVE-2021-3489

CVE-2021-3490

CVSS scores:

CVE-2020-36322 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2020-36322 (SUSE): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CVE-2021-28660 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-28660 (SUSE): 8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2021-29154 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-29154 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-32399 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:2198-1
Rating: important

Topics%20covered

Topics Covered

security advisory important suse severe linux kernel solution live patch

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.