Configuration in drbd-kmp-rt - #VU74489
Published: April 5, 2023
Vulnerability identifier: #VU74489
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-16
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The issue may allow a local user to bypass implemented security restrictions.
The issue exists due to the possibility to bypass implemented security restrictions, related to secure boot. it was addressed by rebuilding the package with the new secure boot key.
Affected software
drbd-kmp-rt
drbd-kmp-rt-debuginfo
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 12
SUSE Linux Enterprise Server 12
drbd-kmp-rt-debuginfo
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 12
SUSE Linux Enterprise Server 12
Remediation
Install updates from vendor's website.
drbd-kmp-rt - update to 9.0.14+git.62f906cf_k4.12.14_10.115-4.10.1
drbd-kmp-rt-debuginfo - update to 9.0.14+git.62f906cf_k4.12.14_10.115-4.10.1
drbd-kmp-rt-debuginfo - update to 9.0.14+git.62f906cf_k4.12.14_10.115-4.10.1