Configuration in oracleasm-kmp-default - #VU73906
Published: March 21, 2023
Vulnerability identifier: #VU73906
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-16
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The issue may allow a local user to bypass implemented security restrictions.
The issue exists due to the possibility to bypass implemented security restrictions, related to secure boot. it was addressed by rebuilding the package with the new secure boot key.
Affected software
oracleasm-kmp-default
oracleasm-kmp-default-debuginfo
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
oracleasm-kmp-default-debuginfo
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
Remediation
Install updates from vendor's website.
oracleasm-kmp-default - update to 2.0.8_k4.12.14_122.153-9.13.2
oracleasm-kmp-default-debuginfo - update to 2.0.8_k4.12.14_122.153-9.13.2
oracleasm-kmp-default-debuginfo - update to 2.0.8_k4.12.14_122.153-9.13.2