Описание
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_28 fixes one issue.
The following security issue was fixed:
- CVE-2021-39698: Fixed a possible memory corruption due to a use after free in aio_poll_complete_work. This could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1196956)
Список пакетов
SUSE Linux Enterprise Live Patching 15 SP4
kernel-livepatch-5_14_21-150400_24_28-default-2-150400.2.1
Ссылки
- Link for SUSE-SU-2022:4036-1
- E-Mail link for SUSE-SU-2022:4036-1
- SUSE Security Ratings
- SUSE Bug 1196959
- SUSE CVE CVE-2021-39698 page
Описание
In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-185125206References: Upstream kernel
Затронутые продукты
SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_28-default-2-150400.2.1
Ссылки
- CVE-2021-39698
- SUSE Bug 1196956
- SUSE Bug 1196959
- SUSE Bug 1209225