SUSE-SU-2021:3443-1
SUSE-SU-2021:3443-1 · Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP2)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
This update for the Linux Kernel 5.3.18-24_52 fixes several issues. The following security issues were fixed: - CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118) - CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613) - CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12-sp4_update_19 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 10-2.2
Update to 10-2.2
kgraft-patch-sle12-sp4_update_18 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 11-2.2
Update to 11-2.2
kgraft-patch-sle12-sp4_update_17 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kgraft-patch-sle12-sp5_update_16 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 10-2.2
Update to 10-2.2
kgraft-patch-sle12-sp5_update_15 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 11-2.2
Update to 11-2.2
kgraft-patch-sle12-sp5_update_14 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kgraft-patch-sle12-sp5_update_12 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 14-2.2
Update to 14-2.2
kgraft-patch-sle12-sp5_update_11 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 14-2.2
Update to 14-2.2
kgraft-patch-sle12-sp5_update_10 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 16-2.2
Update to 16-2.2
kgraft-patch-sle12-sp5_update_13 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kernel-livepatch-sle15-sp1_update_23 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 10-2.2
Update to 10-2.2
kernel-livepatch-sle15-sp1_update_21 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kernel-livepatch-sle15-sp1_update_20 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kernel-livepatch-sle15-sp1_update_19 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kernel-livepatch-sle15-sp1_update_17 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 13-2.2
Update to 13-2.2
kernel-livepatch-sle15-sp1_update_16 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 14-2.2
Update to 14-2.2
kernel-livepatch-sle15-sp1_update_22 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 11-2.2
Update to 11-2.2
kernel-livepatch-sle15-sp1_update_18 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 13-2.2
Update to 13-2.2
kernel-livepatch-sle15-sp2_update_8 SUSE:Linux Enterprise Live Patching 15 SP2
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kernel-livepatch-sle15-sp2_update_7 SUSE:Linux Enterprise Live Patching 15 SP2
- Affected ranges
- ECOSYSTEM: < 13-2.2
Update to 13-2.2
kernel-livepatch-sle15-sp2_update_10 SUSE:Linux Enterprise Live Patching 15 SP2
- Affected ranges
- ECOSYSTEM: < 11-2.2
Update to 11-2.2
kernel-livepatch-sle15-sp2_update_9 SUSE:Linux Enterprise Live Patching 15 SP2
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kernel-livepatch-sle15-sp2_update_6 SUSE:Linux Enterprise Live Patching 15 SP2
- Affected ranges
- ECOSYSTEM: < 13-2.2
Update to 13-2.2
kernel-livepatch-sle15-sp2_update_5 SUSE:Linux Enterprise Live Patching 15 SP2
- Affected ranges
- ECOSYSTEM: < 13-2.2
Update to 13-2.2
Original sources
- https://www.suse.com/support/update/announcement/2021/suse-su-20213443-1/
- https://bugzilla.suse.com/1187054
- https://bugzilla.suse.com/1188613
- https://bugzilla.suse.com/1190118
- https://www.suse.com/security/cve/CVE-2021-3573
- https://www.suse.com/security/cve/CVE-2021-3640
- https://www.suse.com/security/cve/CVE-2021-38160
- https://osv.dev/vulnerability/SUSE-SU-2021:3443-1