Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

SUSE: 2021:3806-1 Important: Linux Kernel Security Advisory

suse
Calendar Grey November 25, 2021
Scroller Suse
The latest vital security patch from SUSE for the Linux Kernel addresses multiple vulnerabilities while boosting system reliability and efficiency.
An update that solves 6 vulnerabilities, contains one feature and has 35 fixes is now available

Summary

The SUSE Linux Enterprise 15 SP3 kernel for Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573) You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0) - CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045). - CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in

Topics%20covered

Topics Covered

security advisory kernel security vulnerability SUSE important update system fixes

References

#1094840 #1133021 #1152489 #1154353 #1157177

#1167773 #1169263 #1170269 #1176940 #1180749

#1184924 #1188601 #1190523 #1190795 #1191628

#1191790 #1191851 #1191958 #1191961 #1191980

#1192045 #1192217 #1192229 #1192267 #1192273

#1192288 #1192328 #1192375 #1192473 #1192549

#1192718 #1192740 #1192745 #1192750 #1192753

#1192758 #1192781 #1192802 #1192896 #1192906

#1192918 SLE-22573

Cross- CVE-2021-0941 CVE-2021-20322 CVE-2021-31916

CVE-2021-34981 CVE-2021-37159 CVE-2021-43389

CVSS scores:

CVE-2021-0941 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2021-20322 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CVE-2021-31916 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:3806-1
Rating: important

Topics%20covered

Topics Covered

security advisory kernel security vulnerability SUSE important update system fixes

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.