Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2021.2589
Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP2)
2 August 2021
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Linux kernel
Publisher: SUSE
Operating System: SUSE
Impact/Access: Root Compromise -- Existing Account
Execute Arbitrary Code/Commands -- Existing Account
Increased Privileges -- Existing Account
Access Privileged Data -- Existing Account
Denial of Service -- Existing Account
Resolution: Patch/Upgrade
CVE Names: CVE-2021-33909 CVE-2021-33034 CVE-2021-32399
CVE-2021-29154 CVE-2021-28950 CVE-2021-28688
CVE-2021-28660 CVE-2021-27365 CVE-2021-27364
CVE-2021-27363 CVE-2021-23133 CVE-2021-22555
CVE-2021-3444 CVE-2020-36385 CVE-2020-36322
Reference: ASB-2021.0135
ASB-2021.0134
ESB-2021.2583
ESB-2021.2555
ESB-2021.2548
ESB-2021.2543
ESB-2021.2532
Original Bulletin:
https://www.suse.com/support/update/announcement/2021/suse-su-20212577-1
- --------------------------BEGIN INCLUDED TEXT--------------------
SUSE Security Update: Security update for the Linux Kernel (Live Patch 15 for
SLE 15 SP2)
______________________________________________________________________________
Announcement ID: SUSE-SU-2021:2577-1
Rating: important
References: #1182717 #1183120 #1183491 #1183658 #1184171 #1184710
#1184952 #1185847 #1185899 #1185901 #1186285 #1187052
#1188117 #1188257
Cross-References: CVE-2020-36322 CVE-2020-36385 CVE-2021-22555 CVE-2021-23133
CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 CVE-2021-28660
CVE-2021-28688 CVE-2021-29154 CVE-2021-32399 CVE-2021-33034
CVE-2021-33909 CVE-2021-3444
Affected Products:
SUSE Linux Enterprise Module for Live Patching 15-SP2
______________________________________________________________________________
An update that fixes 14 vulnerabilities is now available.
Description:
This update for the Linux Kernel 5.3.18-24_53_4 fixes several issues.
The following security issues were fixed:
o CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that
allows to andobtain full root privileges. (bsc#1188062)
o CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/
x_tables.c that could allow local provilege escalation. (bsc#1188116)
o CVE-2020-36385: Fixed a use-after-free vulnerability reached via the
ctx_list in some ucma_migrate_id situations where ucma_close is called.
(bnc#1187050)
o CVE-2021-23133: Fixed a race condition in the SCTP sockets that could lead
to kernel privilege escalation from the context of a network service or an
unprivileged process. (bnc#1184675)
o CVE-2021-33034: Fixed a use-after-free vulnerability when destroying an
hci_chan which leads to writing an arbitrary value. (bnc#1186111)
o CVE-2021-32399: Fixed a race condition in net/bluetooth/hci_request.c for
removal of the HCI controller. (bsc#1184611)
o CVE-2020-36322: Fixed an issue in the FUSE filesystem implementation. This
bug was addressed with a previous fix, which turned out was incomplete, and
its incompleteness is tracked as CVE-2021-28950. (bsc#1184211)
o CVE-2021-29154: Fixed an incorrect computation of branch displacements in
the BPF JIT compilers, which could allow to execute arbitrary code within
the kernel context. (bsc#1184391)
o CVE-2021-3444: The bpf verifier did not properly handle mod32 destination
register truncation when the source register was known to be 0. A local
attacker with the ability to load bpf programs could use this gain
out-of-bounds reads in kernel memory leading to information disclosure
(kernel memory), and possibly out-of-bounds writes that could potentially
lead to code execution. (bsc#1184170)
o CVE-2021-28660: Fixed an out-of-bounds write in rtw_wx_set_scan which could
lead to local escalation of privilege with no additional execution
privileges needed. (bsc#1183593)
o CVE-2021-27365: Fixed an issue in certain iSCSI data structures that do not
have appropriate length constraints or checks, and can exceed the PAGE_SIZE
value. (bsc#1182715)
o CVE-2021-28688: Fixed some uninitialization pointers in Xen that could
result in leaking persistent grants. The leak in turn would prevent fully
cleaning up after a respective guest has died, leaving around zombie
domains. (bsc#1183646)
o CVE-2021-27363: Fixed a kernel pointer leak that can be used to determine
the address of the iscsi_transport structure. (bsc#1182716)
o CVE-2021-27364: Fixed an issue that provides an unprivileged user the
ability of craft Netlink messages. (bsc#1182717)
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
o SUSE Linux Enterprise Module for Live Patching 15-SP2:
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2021-2577=1
Package List:
o SUSE Linux Enterprise Module for Live Patching 15-SP2 (ppc64le s390x
x86_64):
kernel-livepatch-5_3_18-24_53_4-default-2-2.1
kernel-livepatch-5_3_18-24_53_4-default-debuginfo-2-2.1
kernel-livepatch-SLE15-SP2_Update_15-debugsource-2-2.1
References:
o https://www.suse.com/security/cve/CVE-2020-36322.html
o https://www.suse.com/security/cve/CVE-2020-36385.html
o https://www.suse.com/security/cve/CVE-2021-22555.html
o https://www.suse.com/security/cve/CVE-2021-23133.html
o https://www.suse.com/security/cve/CVE-2021-27363.html
o https://www.suse.com/security/cve/CVE-2021-27364.html
o https://www.suse.com/security/cve/CVE-2021-27365.html
o https://www.suse.com/security/cve/CVE-2021-28660.html
o https://www.suse.com/security/cve/CVE-2021-28688.html
o https://www.suse.com/security/cve/CVE-2021-29154.html
o https://www.suse.com/security/cve/CVE-2021-32399.html
o https://www.suse.com/security/cve/CVE-2021-33034.html
o https://www.suse.com/security/cve/CVE-2021-33909.html
o https://www.suse.com/security/cve/CVE-2021-3444.html
o https://bugzilla.suse.com/1182717
o https://bugzilla.suse.com/1183120
o https://bugzilla.suse.com/1183491
o https://bugzilla.suse.com/1183658
o https://bugzilla.suse.com/1184171
o https://bugzilla.suse.com/1184710
o https://bugzilla.suse.com/1184952
o https://bugzilla.suse.com/1185847
o https://bugzilla.suse.com/1185899
o https://bugzilla.suse.com/1185901
o https://bugzilla.suse.com/1186285
o https://bugzilla.suse.com/1187052
o https://bugzilla.suse.com/1188117
o https://bugzilla.suse.com/1188257
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
iQIVAwUBYQdqjeNLKJtyKPYoAQhi0BAArIcYoQVfulJm0KCbvU8fxBPY0Z3YTSZv
fJtndh/Y5UC/zPh0AjxTl5qSRN0Ilk3iYFtfb4SZcdwZerUJugH83nxADtP3VQDw
k5izRBDPIsJ6s5kCjd4w2bOF7lsefOtD4k0fCyua2XjGLSLzaZ10/sN65BMLwRHe
1RG0zoju1dx+qsYjpeBipjgLOohlCevpnGQ9W00TeCkPrNRHW6+cDMyT0R9pFurm
L2prl0lHcn5kSdK5D0S0NjME6erosWWEoXk9CB8CP31n50i5S6qVwYmV/2isJ1wa
XtF5ZcwEVC4zIv3VGTRjK01rWvTrf7S7ZMqJsRz5YfRaisbNRmMx5Ts95CHjQdF6
1SGFAcmi28A+VGSBLkk3Wi2p0zRqQIUUNFiaeQQWERmzVFpIjBM+l7AY4lYqAt8P
UksAfCBNfTP9dd7Ku883TYrAMLbCTkODHewEiFo2Qb4jlDepVN+hjBDky9dXCXdv
YdDT2NZOfUegO84n5+SKTf6Qi0N2hDpJ1x5pzIWkHZtAsjPGFzqu+LLxhhCeHGqb
9VawxkLpb237SDjtDQPjTyXWt1nS1DquqhKYeUhH2BZq7q8dBK8FhKb0MLdSVXFq
x1FuVM5XVp+KovQrEvkHv6ps3+izp8EZrROZt+ri8V0NhhcJ5XSp2qSxJ9s7AaNN
2++MvVJ6cpI=
=4+na
-----END PGP SIGNATURE-----