Описание
Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_124 fixes several issues.
The following security issues were fixed:
- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
Список пакетов
SUSE Linux Enterprise Live Patching 15
kernel-livepatch-4_12_14-150_69-default-5-2.2
kernel-livepatch-4_12_14-150_66-default-6-2.2
kernel-livepatch-4_12_14-150_63-default-8-2.2
kernel-livepatch-4_12_14-150_58-default-10-2.2
kernel-livepatch-4_12_14-150_55-default-11-2.2
kernel-livepatch-4_12_14-150_52-default-11-2.2
SUSE Linux Enterprise Server 12 SP3-LTSS
kgraft-patch-4_4_180-94_135-default-8-2.2
kgraft-patch-4_4_180-94_130-default-10-2.2
kgraft-patch-4_4_180-94_127-default-11-2.2
kgraft-patch-4_4_180-94_124-default-11-2.3
SUSE Linux Enterprise Server for SAP Applications 12 SP3
kgraft-patch-4_4_180-94_135-default-8-2.2
kgraft-patch-4_4_180-94_130-default-10-2.2
kgraft-patch-4_4_180-94_127-default-11-2.2
kgraft-patch-4_4_180-94_124-default-11-2.3
Ссылки
- Link for SUSE-SU-2021:2060-1
- E-Mail link for SUSE-SU-2021:2060-1
- SUSE Security Ratings
- SUSE Bug 1185899
- SUSE Bug 1186285
- SUSE CVE CVE-2021-32399 page
- SUSE CVE CVE-2021-33034 page
Описание
net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.
Затронутые продукты
SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_52-default-11-2.2
SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_55-default-11-2.2
SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_58-default-10-2.2
SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_63-default-8-2.2
Ссылки
- CVE-2021-32399
- SUSE Bug 1184611
- SUSE Bug 1185898
- SUSE Bug 1185899
- SUSE Bug 1196174
- SUSE Bug 1200084
- SUSE Bug 1201734
Описание
In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value.
Затронутые продукты
SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_52-default-11-2.2
SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_55-default-11-2.2
SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_58-default-10-2.2
SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_63-default-8-2.2
Ссылки
- CVE-2021-33034
- SUSE Bug 1186111
- SUSE Bug 1186285