Описание
Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_68 fixes one issue.
The following security issue was fixed:
- CVE-2021-39698: Fixed a possible memory corruption due to a use after free in aio_poll_complete_work of aio.c (bsc#1196959).
Список пакетов
SUSE Linux Enterprise Live Patching 15 SP3
kernel-livepatch-5_3_18-150300_59_68-default-2-150300.2.2
Ссылки
- Link for SUSE-SU-2022:1989-1
- E-Mail link for SUSE-SU-2022:1989-1
- SUSE Security Ratings
- SUSE Bug 1196959
- SUSE CVE CVE-2021-39698 page
Описание
In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-185125206References: Upstream kernel
Затронутые продукты
SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_68-default-2-150300.2.2
Ссылки
- CVE-2021-39698
- SUSE Bug 1196956
- SUSE Bug 1196959
- SUSE Bug 1209225