SUSE-SU-2021:4038-1
SUSE-SU-2021:4038-1 · Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
This update for the Linux Kernel 4.12.14-197_75 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045). - CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12-sp4_update_22 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 6-2.1
Update to 6-2.1
kgraft-patch-sle12-sp4_update_21 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 8-2.1
Update to 8-2.1
kgraft-patch-sle12-sp4_update_20 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 9-2.1
Update to 9-2.1
kgraft-patch-sle12-sp4_update_19 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kgraft-patch-sle12-sp4_update_18 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 13-2.2
Update to 13-2.2
kgraft-patch-sle12-sp5_update_24 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 3-2.1
Update to 3-2.1
kgraft-patch-sle12-sp5_update_23 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 3-2.1
Update to 3-2.1
kgraft-patch-sle12-sp5_update_22 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 5-2.1
Update to 5-2.1
kgraft-patch-sle12-sp5_update_21 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 6-2.1
Update to 6-2.1
kgraft-patch-sle12-sp5_update_20 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 7-2.1
Update to 7-2.1
kgraft-patch-sle12-sp5_update_19 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 7-2.1
Update to 7-2.1
kgraft-patch-sle12-sp5_update_18 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 9-2.1
Update to 9-2.1
kgraft-patch-sle12-sp5_update_17 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 10-2.1
Update to 10-2.1
kgraft-patch-sle12-sp5_update_16 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kgraft-patch-sle12-sp5_update_15 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 13-2.2
Update to 13-2.2
kgraft-patch-sle12-sp5_update_14 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 14-2.2
Update to 14-2.2
kgraft-patch-sle12-sp5_update_13 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 14-2.2
Update to 14-2.2
kernel-livepatch-sle15_update_25 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 6-2.1
Update to 6-2.1
kernel-livepatch-sle15_update_24 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 9-2.1
Update to 9-2.1
kernel-livepatch-sle15_update_23 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 12-2.2
Update to 12-2.2
kernel-livepatch-sle15_update_22 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 13-2.2
Update to 13-2.2
kernel-livepatch-sle15-sp1_update_26 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 6-2.1
Update to 6-2.1
kernel-livepatch-sle15-sp1_update_25 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 8-2.1
Update to 8-2.1
kernel-livepatch-sle15-sp1_update_24 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 9-2.1
Update to 9-2.1