Описание
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_83 fixes one issue.
The following security issue was fixed:
- CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
Список пакетов
SUSE Linux Enterprise Live Patching 15 SP2
kernel-livepatch-5_3_18-24_67-default-6-2.2
kernel-livepatch-5_3_18-24_70-default-6-2.2
kernel-livepatch-5_3_18-24_75-default-5-2.2
kernel-livepatch-5_3_18-24_78-default-4-2.2
kernel-livepatch-5_3_18-24_83-default-2-2.2
Ссылки
- Link for SUSE-SU-2021:3712-1
- E-Mail link for SUSE-SU-2021:3712-1
- SUSE Security Ratings
- SUSE Bug 1191318
- SUSE CVE CVE-2021-41864 page
Описание
prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write.
Затронутые продукты
SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_67-default-6-2.2
SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_70-default-6-2.2
SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_75-default-5-2.2
SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_78-default-4-2.2
Ссылки
- CVE-2021-41864
- SUSE Bug 1191317
- SUSE Bug 1191318