SUSE-SU-2021:1724-1
SUSE-SU-2021:1724-1 · Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 4.12.14-197_45 fixes several issues. The following security issues were fixed: - CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952). - CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710) - Fix system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info node list was NULL (bsc#1183452).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12-sp5_update_15 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 5-2.2
Update to 5-2.2
kgraft-patch-sle12-sp5_update_14 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 6-2.2
Update to 6-2.2
kgraft-patch-sle12-sp5_update_13 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 6-2.2
Update to 6-2.2
kgraft-patch-sle12-sp5_update_12 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 8-2.2
Update to 8-2.2
kgraft-patch-sle12-sp5_update_11 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 8-2.2
Update to 8-2.2
kgraft-patch-sle12-sp5_update_10 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 10-2.2
Update to 10-2.2
kgraft-patch-sle12-sp5_update_9 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 11-2.2
Update to 11-2.2
kgraft-patch-sle12-sp5_update_8 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kgraft-patch-sle12-sp5_update_7 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kgraft-patch-sle12-sp5_update_6 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kgraft-patch-sle12-sp5_update_5 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kernel-livepatch-sle15-sp1_update_21 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 6-2.2
Update to 6-2.2
kernel-livepatch-sle15-sp1_update_20 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 6-2.2
Update to 6-2.2
kernel-livepatch-sle15-sp1_update_19 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 6-2.2
Update to 6-2.2
kernel-livepatch-sle15-sp1_update_18 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 7-2.2
Update to 7-2.2
kernel-livepatch-sle15-sp1_update_17 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 7-2.2
Update to 7-2.2
kernel-livepatch-sle15-sp1_update_16 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 8-2.2
Update to 8-2.2
kernel-livepatch-sle15-sp1_update_15 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 9-2.2
Update to 9-2.2
kernel-livepatch-sle15-sp1_update_14 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 10-2.2
Update to 10-2.2
kernel-livepatch-sle15-sp1_update_13 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 10-2.2
Update to 10-2.2
kernel-livepatch-sle15-sp1_update_12 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 10-2.2
Update to 10-2.2
Original sources
- https://www.suse.com/support/update/announcement/2021/suse-su-20211724-1/
- https://bugzilla.suse.com/1183452
- https://bugzilla.suse.com/1184710
- https://bugzilla.suse.com/1184952
- https://www.suse.com/security/cve/CVE-2020-36322
- https://www.suse.com/security/cve/CVE-2021-29154
- https://osv.dev/vulnerability/SUSE-SU-2021:1724-1