SUSE update for the Linux Kernel (Live Patch 23 for SLE 15 SP1)



Risk Low
Patch available YES
Number of vulnerabilities 3
CVE-ID CVE-2021-28660
CVE-2021-28688
CVE-2021-3444
CWE-ID CWE-787
CWE-665
CWE-125
Exploitation vector Local
Public exploit N/A
Vulnerable software
 SUSE Linux Enterprise Module for Live Patching
Operating systems & Components / Operating system

kernel-livepatch-4_12_14-197_86-default
Operating systems & Components / Operating system package or component

kernel-livepatch-SLE15-SP2_Update_11-debugsource
Operating systems & Components / Operating system package or component

kernel-livepatch-5_3_18-24_52-default-debuginfo
Operating systems & Components / Operating system package or component

kernel-livepatch-5_3_18-24_52-default
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Out-of-bounds write

EUVDB-ID: #VU56817

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-28660

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in the "rtw_wx_set_scan" in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c. A local user can trigger out-of-bounds write and execute arbitrary code on the target system.

Mitigation

Update the affected package the Linux Kernel (Live Patch 23 for SLE 15 SP1) to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Live Patching: 15-SP1 - 15-SP2

kernel-livepatch-4_12_14-197_86-default: before 3-2.2

kernel-livepatch-SLE15-SP2_Update_11-debugsource: before 3-2.2

kernel-livepatch-5_3_18-24_52-default-debuginfo: before 3-2.2

kernel-livepatch-5_3_18-24_52-default: before 3-2.2

CPE2.3 External links

https://www.suse.com/support/update/announcement/2021/suse-su-20211395-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Improper Initialization

EUVDB-ID: #VU63658

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-28688

CWE-ID: CWE-665 - Improper Initialization

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service attack.

The vulnerability exists due to improper initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. A local user can perform a denial of service attack.

Mitigation

Update the affected package the Linux Kernel (Live Patch 23 for SLE 15 SP1) to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Live Patching: 15-SP1 - 15-SP2

kernel-livepatch-4_12_14-197_86-default: before 3-2.2

kernel-livepatch-SLE15-SP2_Update_11-debugsource: before 3-2.2

kernel-livepatch-5_3_18-24_52-default-debuginfo: before 3-2.2

kernel-livepatch-5_3_18-24_52-default: before 3-2.2

CPE2.3 External links

https://www.suse.com/support/update/announcement/2021/suse-su-20211395-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Out-of-bounds read

EUVDB-ID: #VU90368

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3444

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to an out-of-bounds read error within the fixup_bpf_calls() function in kernel/bpf/verifier.c. A local user can execute arbitrary code.

Mitigation

Update the affected package the Linux Kernel (Live Patch 23 for SLE 15 SP1) to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Live Patching: 15-SP1 - 15-SP2

kernel-livepatch-4_12_14-197_86-default: before 3-2.2

kernel-livepatch-SLE15-SP2_Update_11-debugsource: before 3-2.2

kernel-livepatch-5_3_18-24_52-default-debuginfo: before 3-2.2

kernel-livepatch-5_3_18-24_52-default: before 3-2.2

CPE2.3 External links

https://www.suse.com/support/update/announcement/2021/suse-su-20211395-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###