Stay Secure with the Latest Linux Advisories

security advisoryprivilege escalationimportant

SUSE 15 SP2: SUSE-SU-2021:2387-1 Important Security Update

An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP2) ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:2387-1 Rating: important References: #1185901 #1187597 Cross-References: CVE-2021-0512 CVE-2021-23133 CVSS scores: CVE-2021-0512 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-23133 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-23133 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Module for Live Patching 15-SP2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for the Linux Kernel 5.3.18-24_34 fixes several issues. The following security issues were fixed: - CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597) - CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Live Patching 15-SP2: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2021-2379=1 SUSE-SLE-Module-Live-Patching-15-SP2-2021-2380=1 SUSE-SLE-Module-Live-Patching-15-SP2-2021-2381=1 SUSE-SLE-Module-Live-Patching-15-SP2-2021-2382=1 SUSE-SLE-Module-Live-Patching-15-SP2-2021-2387=1 SUSE-SLE-Module-Live-Patching-15-SP2-2021-2388=1 Package List: - SUSE Linux Enterprise Module for Live Patching 15-SP2 (ppc64le s390x x86_64): kernel-livepatch-5_3_18-24_12-default-11-2.2 kernel-livepatch-5_3_18-24_12-default-debuginfo-11-2.2 kernel-livepatch-5_3_18-24_15-default-11-2.2 kernel-livepatch-5_3_18-24_15-default-debuginfo-11-2.2 kernel-livepatch-5_3_18-24_24-default-11-2.2 kernel-livepatch-5_3_18-24_24-default-debuginfo-11-2.2 kernel-livepatch-5_3_18-24_29-default-9-2.2 kernel-livepatch-5_3_18-24_29-default-debuginfo-9-2.2 kernel-livepatch-5_3_18-24_34-default-9-2.2 kernel-livepatch-5_3_18-24_34-default-debuginfo-9-2.2 kernel-livepatch-5_3_18-24_37-default-9-2.2 kernel-livepatch-5_3_18-24_37-default-debuginfo-9-2.2 kernel-livepatch-SLE15-SP2_Update_2-debugsource-11-2.2 kernel-livepatch-SLE15-SP2_Update_3-debugsource-11-2.2 kernel-livepatch-SLE15-SP2_Update_4-debugsource-11-2.2 kernel-livepatch-SLE15-SP2_Update_5-debugsource-9-2.2 kernel-livepatch-SLE15-SP2_Update_6-debugsource-9-2.2 kernel-livepatch-SLE15-SP2_Update_7-debugsource-9-2.2 References: https://www.suse.com/security/cve/CVE-2021-0512.html https://www.suse.com/security/cve/CVE-2021-23133.html https://bugzilla.suse.com/1185901 https://bugzilla.suse.com/1187597 . Major SUSE Security Patch released, targeting critical Linux Kernel vulnerabilities, reinforcing system reliability and safeguarding against potential threats.. SUSE Linux Patch, Kernel Security Update, Live Patching SLE15. . Severity: Important. LinuxSecurity.com Team

Jul 16, 2021 •Important SuSE