Anolis OS update for kernel(RHCK)4.18

Published: 2021-11-23 | Updated: 2025-03-29

Risk	Medium
Patch available	YES
Number of vulnerabilities	3
CVE-ID	CVE-2021-20317 CVE-2021-28950 CVE-2021-43267
CWE-ID	CWE-665 CWE-834 CWE-119
Exploitation vector	Local network
Public exploit	Public exploit code for vulnerability #3 is available.
Vulnerable software	Anolis OS Operating systems & Components / Operating system kernel-doc Operating systems & Components / Operating system package or component python3-perf Operating systems & Components / Operating system package or component perf Operating systems & Components / Operating system package or component kernel-tools-libs Operating systems & Components / Operating system package or component kernel-tools Operating systems & Components / Operating system package or component kernel-modules-extra Operating systems & Components / Operating system package or component kernel-modules Operating systems & Components / Operating system package or component kernel-headers Operating systems & Components / Operating system package or component kernel-devel Operating systems & Components / Operating system package or component kernel-debug-modules-extra Operating systems & Components / Operating system package or component kernel-debug-modules Operating systems & Components / Operating system package or component kernel-debug-devel Operating systems & Components / Operating system package or component kernel-debug-core Operating systems & Components / Operating system package or component kernel-debug Operating systems & Components / Operating system package or component kernel-cross-headers Operating systems & Components / Operating system package or component kernel-core Operating systems & Components / Operating system package or component kernel Operating systems & Components / Operating system package or component bpftool Operating systems & Components / Operating system package or component
Vendor	OpenAnolis

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Improper Initialization

EUVDB-ID: #VU58208

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-20317

CWE-ID: CWE-665 - Improper Initialization

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper initialization the Linux kernel. A corrupted timer tree causes the task wakeup to be missing in the timerqueue_add function in lib/timerqueue.c. A local user can run a specially crafted application to crash the kernel.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

kernel-doc: before 4.18.0-305.28.1

python3-perf: before 4.18.0-305.28.1

perf: before 4.18.0-305.28.1

kernel-tools-libs: before 4.18.0-305.28.1

kernel-tools: before 4.18.0-305.28.1

kernel-modules-extra: before 4.18.0-305.28.1

kernel-modules: before 4.18.0-305.28.1

kernel-headers: before 4.18.0-305.28.1

kernel-devel: before 4.18.0-305.28.1

kernel-debug-modules-extra: before 4.18.0-305.28.1

kernel-debug-modules: before 4.18.0-305.28.1

kernel-debug-devel: before 4.18.0-305.28.1

kernel-debug-core: before 4.18.0-305.28.1

kernel-debug: before 4.18.0-305.28.1

kernel-cross-headers: before 4.18.0-305.28.1

kernel-core: before 4.18.0-305.28.1

kernel: before 4.18.0-305.28.1

bpftool: before 4.18.0-305.28.1

CPE2.3

External links

https://anas.openanolis.cn/errata/detail/ANSA-2021:0199

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Excessive Iteration

EUVDB-ID: #VU58207

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-28950

CWE-ID: CWE-834 - Excessive Iteration

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to excessive iteration in fs/fuse/fuse_i.h in the Linux kernel. A local user can run a specially crafted program to perform a denial of service attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

kernel-doc: before 4.18.0-305.28.1

python3-perf: before 4.18.0-305.28.1

perf: before 4.18.0-305.28.1

kernel-tools-libs: before 4.18.0-305.28.1

kernel-tools: before 4.18.0-305.28.1

kernel-modules-extra: before 4.18.0-305.28.1

kernel-modules: before 4.18.0-305.28.1

kernel-headers: before 4.18.0-305.28.1

kernel-devel: before 4.18.0-305.28.1

kernel-debug-modules-extra: before 4.18.0-305.28.1

kernel-debug-modules: before 4.18.0-305.28.1

kernel-debug-devel: before 4.18.0-305.28.1

kernel-debug-core: before 4.18.0-305.28.1

kernel-debug: before 4.18.0-305.28.1

kernel-cross-headers: before 4.18.0-305.28.1

kernel-core: before 4.18.0-305.28.1

kernel: before 4.18.0-305.28.1

bpftool: before 4.18.0-305.28.1

CPE2.3

External links

https://anas.openanolis.cn/errata/detail/ANSA-2021:0199

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Buffer overflow

EUVDB-ID: #VU58209

Risk: Medium

CVSSv4.0: 7.4 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2021-43267

CWE-ID: CWE-119 - Memory corruption

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to insufficient validation of user-supplied input in net/tipc/crypto.c in the Linux kernel. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type.

A remote attacker can send specially crafted MSG_CRYPTO messages to the affected system, trigger memory corruption and execute arbitrary code on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

kernel-doc: before 4.18.0-305.28.1

python3-perf: before 4.18.0-305.28.1

perf: before 4.18.0-305.28.1

kernel-tools-libs: before 4.18.0-305.28.1

kernel-tools: before 4.18.0-305.28.1

kernel-modules-extra: before 4.18.0-305.28.1

kernel-modules: before 4.18.0-305.28.1

kernel-headers: before 4.18.0-305.28.1

kernel-devel: before 4.18.0-305.28.1

kernel-debug-modules-extra: before 4.18.0-305.28.1

kernel-debug-modules: before 4.18.0-305.28.1

kernel-debug-devel: before 4.18.0-305.28.1

kernel-debug-core: before 4.18.0-305.28.1

kernel-debug: before 4.18.0-305.28.1

kernel-cross-headers: before 4.18.0-305.28.1

kernel-core: before 4.18.0-305.28.1

kernel: before 4.18.0-305.28.1

bpftool: before 4.18.0-305.28.1

CPE2.3

External links

https://anas.openanolis.cn/errata/detail/ANSA-2021:0199

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.