SUSE-SU-2021:2344-1
SUSE-SU-2021:2344-1 · Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 4.12.14-197_48 fixes several issues. The following security issues were fixed: - CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (bsc#1187687) - CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597) - CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12-sp4_update_17 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 8-2.2
Update to 8-2.2
kgraft-patch-sle12-sp4_update_18 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 7-2.2
Update to 7-2.2
kgraft-patch-sle12-sp4_update_19 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 6-2.2
Update to 6-2.2
kgraft-patch-sle12-sp5_update_7 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 14-2.2
Update to 14-2.2
kgraft-patch-sle12-sp5_update_8 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 14-2.2
Update to 14-2.2
kernel-livepatch-sle15_update_22 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 7-2.2
Update to 7-2.2
kernel-livepatch-sle15_update_21 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 9-2.2
Update to 9-2.2
kernel-livepatch-sle15_update_20 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 11-2.2
Update to 11-2.2
kernel-livepatch-sle15_update_19 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kernel-livepatch-sle15-sp1_update_14 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kernel-livepatch-sle15-sp1_update_13 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
Original sources
- https://www.suse.com/support/update/announcement/2021/suse-su-20212344-1/
- https://bugzilla.suse.com/1185901
- https://bugzilla.suse.com/1187597
- https://bugzilla.suse.com/1187687
- https://www.suse.com/security/cve/CVE-2021-0512
- https://www.suse.com/security/cve/CVE-2021-0605
- https://www.suse.com/security/cve/CVE-2021-23133
- https://osv.dev/vulnerability/SUSE-SU-2021:2344-1