Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:3374-1

Опубликовано: 12 окт. 2021
Источник: suse-cvrf

Описание

Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-59_5 fixes several issues.

The following security issues were fixed:

  • CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)
  • CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)
  • CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).

Список пакетов

SUSE Linux Enterprise Live Patching 12 SP4
kgraft-patch-4_12_14-95_80-default-4-2.1
kgraft-patch-4_12_14-95_77-default-6-2.1
kgraft-patch-4_12_14-95_74-default-7-2.1
SUSE Linux Enterprise Live Patching 12 SP5
kgraft-patch-4_12_14-122_80-default-4-2.1
kgraft-patch-4_12_14-122_77-default-5-2.1
kgraft-patch-4_12_14-122_74-default-5-2.1
kgraft-patch-4_12_14-122_71-default-7-2.1
kgraft-patch-4_12_14-122_66-default-8-2.1
SUSE Linux Enterprise Live Patching 15 SP1
kernel-livepatch-4_12_14-197_99-default-4-2.1
kernel-livepatch-4_12_14-197_92-default-6-2.1
kernel-livepatch-4_12_14-197_89-default-7-2.1
SUSE Linux Enterprise Live Patching 15 SP2
kernel-livepatch-5_3_18-24_75-default-4-2.1
kernel-livepatch-5_3_18-24_70-default-5-2.1
kernel-livepatch-5_3_18-24_53_4-default-5-2.1
kernel-livepatch-5_3_18-24_67-default-5-2.1
kernel-livepatch-5_3_18-24_64-default-7-2.1
kernel-livepatch-5_3_18-24_61-default-7-2.1
SUSE Linux Enterprise Live Patching 15 SP3
kernel-livepatch-5_3_18-59_16-default-4-2.1
kernel-livepatch-5_3_18-59_13-default-5-2.1
kernel-livepatch-5_3_18-59_10-default-5-2.1
kernel-livepatch-5_3_18-59_5-default-5-2.1

Ссылки

Описание

A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.

Затронутые продукты
SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-7-2.1
SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_77-default-6-2.1
SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_80-default-4-2.1
SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_66-default-8-2.1
Ссылки

Описание

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.

Затронутые продукты
SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-7-2.1
SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_77-default-6-2.1
SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_80-default-4-2.1
SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_66-default-8-2.1
Ссылки

Описание

** DISPUTED ** In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any existing use case; the length validation was added solely for robustness in the face of anomalous host OS behavior.

Затронутые продукты
SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-7-2.1
SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_77-default-6-2.1
SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_80-default-4-2.1
SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_66-default-8-2.1
Ссылки