Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 493
Alerts This Week
Warning Icon 1 493

SUSE Linux Enterprise 15-SP3 Security Update SUSE-SU-2021:2645-1 Important

suse
Calendar Grey August 10, 2021
Dist Suse Esm H88
The SUSE Linux Kernel security update addresses serious vulnerabilities, boosting the system's defense against known risks.
An update that solves 7 vulnerabilities and has 58 fixes is now available

Summary

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876). - CVE-2021-21781: Fixed a information disclosure vulnerability in the ARM SIGPAGE (bsc#1188445). - CVE-2021-22543: Fixed improper handling of VM_IO|VM_PFNMAP vmas in KVM, which could bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allowed users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation (bsc#1186482). - CVE-2021-37576: Fixed an issue on the powerpc platform, where a KVM

Topics%20covered

Topics Covered

security advisory privilege escalation kernel security threat mitigation memory issue SUSE Linux important update

References

#1065729 #1085224 #1094840 #1113295 #1152472

#1152489 #1153274 #1154353 #1155518 #1156395

#1170511 #1176447 #1176940 #1179243 #1180092

#1180814 #1183871 #1184114 #1184350 #1184631

#1184804 #1185308 #1185377 #1185791 #1186194

#1186206 #1186482 #1186483 #1187215 #1187476

#1187495 #1187585 #1188036 #1188080 #1188101

#1188121 #1188126 #1188176 #1188267 #1188268

#1188269 #1188323 #1188366 #1188405 #1188445

#1188504 #1188620 #1188683 #1188703 #1188720

#1188746 #1188747 #1188748 #1188752 #1188770

#1188771 #1188772 #1188773 #1188774 #1188777

#1188838 #1188876 #1188885 #1188893 #1188973

Cross- CVE-2021-21781 CVE-2021-22543 CVE-2021-35039

CVE-2021-3609 CVE-2021-3612 CVE-2021-3659

CVE-2021-...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:2645-1
Rating: important

Topics%20covered

Topics Covered

security advisory privilege escalation kernel security threat mitigation memory issue SUSE Linux important update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.