SUSE update for the Linux Kernel
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2021-29155 CVE-2021-29650 |
| CWE-ID | CWE-125 CWE-119 |
| Exploitation vector | Local |
| Public exploit | Public exploit code for vulnerability #1 is available. |
| Vulnerable software |
SUSE Linux Enterprise Module for Realtime Operating systems & Components / Operating system kernel-source-rt Operating systems & Components / Operating system package or component kernel-devel-rt Operating systems & Components / Operating system package or component ocfs2-kmp-rt-debuginfo Operating systems & Components / Operating system package or component ocfs2-kmp-rt Operating systems & Components / Operating system package or component kernel-syms-rt Operating systems & Components / Operating system package or component kernel-rt_debug-devel-debuginfo Operating systems & Components / Operating system package or component kernel-rt_debug-devel Operating systems & Components / Operating system package or component kernel-rt_debug-debugsource Operating systems & Components / Operating system package or component kernel-rt_debug-debuginfo Operating systems & Components / Operating system package or component kernel-rt_debug Operating systems & Components / Operating system package or component kernel-rt-devel-debuginfo Operating systems & Components / Operating system package or component kernel-rt-devel Operating systems & Components / Operating system package or component kernel-rt-debugsource Operating systems & Components / Operating system package or component kernel-rt-debuginfo Operating systems & Components / Operating system package or component kernel-rt Operating systems & Components / Operating system package or component gfs2-kmp-rt-debuginfo Operating systems & Components / Operating system package or component gfs2-kmp-rt Operating systems & Components / Operating system package or component dlm-kmp-rt-debuginfo Operating systems & Components / Operating system package or component dlm-kmp-rt Operating systems & Components / Operating system package or component cluster-md-kmp-rt-debuginfo Operating systems & Components / Operating system package or component cluster-md-kmp-rt Operating systems & Components / Operating system package or component |
| Vendor | SUSE |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Out-of-bounds read
EUVDB-ID: #VU67490
Risk: Low
CVSSv4.0: 5.2 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/U:Clear]
CVE-ID: CVE-2021-29155
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists in retrieve_ptr_limit in kernel/bpf/verifier.c in the Linux kernel mechanism. A local, special user privileged (CAP_SYS_ADMIN) BPF program running on affected systems may bypass the protection, and execute speculatively out-of-bounds loads from the kernel memory.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for Realtime: 15-SP2
kernel-source-rt: before 5.3.18-36.2
kernel-devel-rt: before 5.3.18-36.2
ocfs2-kmp-rt-debuginfo: before 5.3.18-36.2
ocfs2-kmp-rt: before 5.3.18-36.2
kernel-syms-rt: before 5.3.18-36.1
kernel-rt_debug-devel-debuginfo: before 5.3.18-36.2
kernel-rt_debug-devel: before 5.3.18-36.2
kernel-rt_debug-debugsource: before 5.3.18-36.2
kernel-rt_debug-debuginfo: before 5.3.18-36.2
kernel-rt_debug: before 5.3.18-36.2
kernel-rt-devel-debuginfo: before 5.3.18-36.2
kernel-rt-devel: before 5.3.18-36.2
kernel-rt-debugsource: before 5.3.18-36.2
kernel-rt-debuginfo: before 5.3.18-36.2
kernel-rt: before 5.3.18-36.2
gfs2-kmp-rt-debuginfo: before 5.3.18-36.2
gfs2-kmp-rt: before 5.3.18-36.2
dlm-kmp-rt-debuginfo: before 5.3.18-36.2
dlm-kmp-rt: before 5.3.18-36.2
cluster-md-kmp-rt-debuginfo: before 5.3.18-36.2
cluster-md-kmp-rt: before 5.3.18-36.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_module_for_realtime:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
http://www.suse.com/support/update/announcement/2021/suse-su-20211571-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
2) Buffer overflow
EUVDB-ID: #VU56240
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-29650
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error within the netfilter subsystem in net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h. A local user can trigger memory corruption upon the assignment of a new table value and cause denial of service.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for Realtime: 15-SP2
kernel-source-rt: before 5.3.18-36.2
kernel-devel-rt: before 5.3.18-36.2
ocfs2-kmp-rt-debuginfo: before 5.3.18-36.2
ocfs2-kmp-rt: before 5.3.18-36.2
kernel-syms-rt: before 5.3.18-36.1
kernel-rt_debug-devel-debuginfo: before 5.3.18-36.2
kernel-rt_debug-devel: before 5.3.18-36.2
kernel-rt_debug-debugsource: before 5.3.18-36.2
kernel-rt_debug-debuginfo: before 5.3.18-36.2
kernel-rt_debug: before 5.3.18-36.2
kernel-rt-devel-debuginfo: before 5.3.18-36.2
kernel-rt-devel: before 5.3.18-36.2
kernel-rt-debugsource: before 5.3.18-36.2
kernel-rt-debuginfo: before 5.3.18-36.2
kernel-rt: before 5.3.18-36.2
gfs2-kmp-rt-debuginfo: before 5.3.18-36.2
gfs2-kmp-rt: before 5.3.18-36.2
dlm-kmp-rt-debuginfo: before 5.3.18-36.2
dlm-kmp-rt: before 5.3.18-36.2
cluster-md-kmp-rt-debuginfo: before 5.3.18-36.2
cluster-md-kmp-rt: before 5.3.18-36.2
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_module_for_realtime:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
http://www.suse.com/support/update/announcement/2021/suse-su-20211571-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
