Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 522
Alerts This Week
Warning Icon 1 522

SUSE: 2021:2438-1 Important: Kernel Update Addresses Multiple Threats

suse
Calendar Grey July 21, 2021
Dist Suse Esm H88
Important SUSE Security Patch resolves several kernel security flaws and vulnerabilities; ensure patches are applied without delay.
An update that solves 5 vulnerabilities and has 18 fixes is now available

Summary

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116). - CVE-2021-33909: Extremely large seq buffer allocations in seq_file could lead to buffer underruns and code execution (bsc#1188062). - CVE-2021-3609: A use-after-free in can/bcm could have led to privilege escalation (bsc#1187215). - CVE-2021-3612: An out-of-bounds memory write flaw was found in the joystick devices subsystem in the way the user calls ioctl JSIOCSBTNMAP. This flaw allowed a local user to crash the system or possibly escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system

Topics%20covered

Topics Covered

security advisory kernel update privilege escalation patching SUSE Linux confidentiality integrity

References

#1065729 #1085224 #1094840 #1152472 #1152489

#1170511 #1179243 #1183871 #1184114 #1184804

#1185308 #1185791 #1187215 #1187585 #1188036

#1188062 #1188080 #1188116 #1188121 #1188176

#1188267 #1188268 #1188269

Cross- CVE-2021-22555 CVE-2021-33909 CVE-2021-35039

CVE-2021-3609 CVE-2021-3612

CVSS scores:

CVE-2021-22555 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-22555 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-33909 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-35039 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-35039 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-3609 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:2438-1
Rating: important

Topics%20covered

Topics Covered

security advisory kernel update privilege escalation patching SUSE Linux confidentiality integrity

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.