Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:2842-1

Опубликовано: 25 авг. 2021
Источник: suse-cvrf

Описание

Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94_144 fixes several issues.

The following security issues were fixed:

  • CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
  • CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).

Список пакетов

SUSE Linux Enterprise Server 12 SP3-LTSS
kgraft-patch-4_4_180-94_127-default-14-2.2
kgraft-patch-4_4_180-94_130-default-13-2.2
kgraft-patch-4_4_180-94_135-default-11-2.2
kgraft-patch-4_4_180-94_138-default-9-2.2
kgraft-patch-4_4_180-94_141-default-8-2.2
kgraft-patch-4_4_180-94_144-default-5-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
kgraft-patch-4_4_180-94_127-default-14-2.2
kgraft-patch-4_4_180-94_130-default-13-2.2
kgraft-patch-4_4_180-94_135-default-11-2.2
kgraft-patch-4_4_180-94_138-default-9-2.2
kgraft-patch-4_4_180-94_141-default-8-2.2
kgraft-patch-4_4_180-94_144-default-5-2.1

Ссылки

Описание

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_127-default-14-2.2
SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_130-default-13-2.2
SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_135-default-11-2.2
SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_138-default-9-2.2
Ссылки

Описание

arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_127-default-14-2.2
SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_130-default-13-2.2
SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_135-default-11-2.2
SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_138-default-9-2.2
Ссылки
Уязвимость SUSE-SU-2021:2842-1