Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 585
Alerts This Week
Warning Icon 1 585

SUSE 15-SP2: 2021:2408-1 Important: Kernel Security Issues Fixed

suse
Calendar Grey July 20, 2021
Dist Suse Esm H88
The latest kernel patch from SUSE tackles 5 critical vulnerabilities and offers necessary corrections. Don't forget to restart your system following the update.
An update that solves 5 vulnerabilities and has 18 fixes is now available

Summary

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116). - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges (bsc#1188062). - CVE-2021-3609: Fixed a race condition in the CAN BCM networking protocol which allows for local privilege escalation (bsc#1187215). - CVE-2021-3612: Fixed an out-of-bounds memory write flaw which could allows a local user to crash the system or possibly escalate their privileges on the system. (bsc#1187585) - CVE-2021-35039: Fixed a bug where modules signature verification did not

Topics%20covered

Topics Covered

security advisory important suse linux kernel system reboot patch instructions cve fixes

References

#1065729 #1085224 #1094840 #1152472 #1152489

#1170511 #1179243 #1183871 #1184114 #1184804

#1185308 #1185791 #1187215 #1187585 #1188036

#1188062 #1188080 #1188116 #1188121 #1188176

#1188267 #1188268 #1188269

Cross- CVE-2021-22555 CVE-2021-33909 CVE-2021-35039

CVE-2021-3609 CVE-2021-3612

CVSS scores:

CVE-2021-22555 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-22555 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-33909 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-35039 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-35039 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-3609 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:2408-1
Rating: important

Topics%20covered

Topics Covered

security advisory important suse linux kernel system reboot patch instructions cve fixes

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.