Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 486
Alerts This Week
Warning Icon 1 486

SUSE: 2021:2678-1 Critical Update for Kernel Security Issues

suse
Calendar Grey August 12, 2021
Dist Suse Esm H88
This revision addresses 5 vulnerabilities within the Linux kernel for SUSE platforms, providing essential security enhancements and updates.
An update that solves 5 vulnerabilities and has 36 fixes is now available

Summary

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876). - CVE-2021-21781: Fixed a information disclosure vulnerability in the ARM SIGPAGE (bsc#1188445). - CVE-2021-22543: Fixed improper handling of VM_IO|VM_PFNMAP vmas in KVM, which could bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allowed users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation (bsc#1186482). - CVE-2021-37576: Fixed an issue on the powerpc platform, where a KVM

Topics%20covered

Topics Covered

security advisory privilege escalation DoS important kernel information disclosure SUSE

References

#1065729 #1085224 #1094840 #1113295 #1153274

#1154353 #1156395 #1176940 #1179243 #1183871

#1184114 #1184350 #1184631 #1185377 #1186194

#1186482 #1186483 #1187476 #1188062 #1188063

#1188101 #1188257 #1188405 #1188445 #1188504

#1188620 #1188683 #1188746 #1188747 #1188748

#1188770 #1188771 #1188772 #1188773 #1188774

#1188777 #1188838 #1188842 #1188876 #1188885

#1188973

Cross- CVE-2021-21781 CVE-2021-22543 CVE-2021-33909

CVE-2021-3659 CVE-2021-37576

CVSS scores:

CVE-2021-21781 (SUSE): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVE-2021-22543 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2021-33909 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-33909 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:2678-1
Rating: important

Topics%20covered

Topics Covered

security advisory privilege escalation DoS important kernel information disclosure SUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.