Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:14849-1 Final 1 1 2021-12-01T16:01:25Z current 2021-12-01T16:01:25Z 2021-12-01T16:01:25Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 11 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c called unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601). - CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351). - CVE-2021-3655: Missing size validations on inbound SCTP packets may have allowed the kernel to read uninitialized memory (bnc#1188563 bnc#1192267). - CVE-2014-7841: The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation, when ASCONF is used, allowed remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk (bnc#904899 bnc#905100). - CVE-2021-20265: A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function when a signal was pending. This flaw allowed an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability (bnc#1183089). - CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bnc#1184673 bnc#1192036). - CVE-2021-33033: The Linux kernel has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value (bnc#1186109 bnc#1188876). - CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958). - CVE-2021-42008: The decode_data function in drivers/net/hamradio/6pack.c had a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access (bnc#1191315). - CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117) - CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172). - CVE-2021-38198: arch/x86/kvm/mmu/paging_tmpl.h incorrectly computed the access permissions of a shadow page, leading to a missing guest protection page fault (bnc#1189262). - CVE-2021-3653: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the 'int_ctl' field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. (bnc#1189399). - CVE-2021-3679: A lack of CPU resource in the Linux kernel tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057). - CVE-2021-3609: A potential local privilege escalation in the CAN BCM networking protocol was fixed (bsc#1187215). - CVE-2020-36385: drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c (bnc#1187050). The following non-security bugs were fixed: - sctp: check asoc peer.asconf_capable before processing asconf (bsc#1190351). - sctp: fully initialize v4 addr in some functions (bsc#1188563). - sctp: simplify addr copy (bsc#1188563). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slessp4-kernel-14849,slexsp3-kernel-14849 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ Link for SUSE-SU-2021:14849-1 https://lists.suse.com/pipermail/sle-security-updates/2021-December/009784.html E-Mail link for SUSE-SU-2021:14849-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1183089 SUSE Bug 1183089 https://bugzilla.suse.com/1184673 SUSE Bug 1184673 https://bugzilla.suse.com/1186109 SUSE Bug 1186109 https://bugzilla.suse.com/1187050 SUSE Bug 1187050 https://bugzilla.suse.com/1187215 SUSE Bug 1187215 https://bugzilla.suse.com/1188172 SUSE Bug 1188172 https://bugzilla.suse.com/1188563 SUSE Bug 1188563 https://bugzilla.suse.com/1188601 SUSE Bug 1188601 https://bugzilla.suse.com/1188876 SUSE Bug 1188876 https://bugzilla.suse.com/1189057 SUSE Bug 1189057 https://bugzilla.suse.com/1189262 SUSE Bug 1189262 https://bugzilla.suse.com/1189399 SUSE Bug 1189399 https://bugzilla.suse.com/1190117 SUSE Bug 1190117 https://bugzilla.suse.com/1190351 SUSE Bug 1190351 https://bugzilla.suse.com/1191315 SUSE Bug 1191315 https://bugzilla.suse.com/1191660 SUSE Bug 1191660 https://bugzilla.suse.com/1191958 SUSE Bug 1191958 https://bugzilla.suse.com/1192036 SUSE Bug 1192036 https://bugzilla.suse.com/1192267 SUSE Bug 1192267 https://bugzilla.suse.com/904899 SUSE Bug 904899 https://bugzilla.suse.com/905100 SUSE Bug 905100 https://www.suse.com/security/cve/CVE-2014-7841/ SUSE CVE CVE-2014-7841 page https://www.suse.com/security/cve/CVE-2020-36385/ SUSE CVE CVE-2020-36385 page https://www.suse.com/security/cve/CVE-2021-20265/ SUSE CVE CVE-2021-20265 page https://www.suse.com/security/cve/CVE-2021-33033/ SUSE CVE CVE-2021-33033 page https://www.suse.com/security/cve/CVE-2021-3542/ SUSE CVE CVE-2021-3542 page https://www.suse.com/security/cve/CVE-2021-3609/ SUSE CVE CVE-2021-3609 page https://www.suse.com/security/cve/CVE-2021-3640/ SUSE CVE CVE-2021-3640 page https://www.suse.com/security/cve/CVE-2021-3653/ SUSE CVE CVE-2021-3653 page https://www.suse.com/security/cve/CVE-2021-3655/ SUSE CVE CVE-2021-3655 page https://www.suse.com/security/cve/CVE-2021-3679/ SUSE CVE CVE-2021-3679 page https://www.suse.com/security/cve/CVE-2021-37159/ SUSE CVE CVE-2021-37159 page https://www.suse.com/security/cve/CVE-2021-3772/ SUSE CVE CVE-2021-3772 page https://www.suse.com/security/cve/CVE-2021-38160/ SUSE CVE CVE-2021-38160 page https://www.suse.com/security/cve/CVE-2021-38198/ SUSE CVE CVE-2021-38198 page https://www.suse.com/security/cve/CVE-2021-42008/ SUSE CVE CVE-2021-42008 page https://www.suse.com/security/cve/CVE-2021-42739/ SUSE CVE CVE-2021-42739 page https://www.suse.com/security/cve/CVE-2021-43389/ SUSE CVE CVE-2021-43389 page SUSE Linux Enterprise Server 11 SP4-LTSS kernel-bigmem-3.0.101-108.132.1 kernel-bigmem-base-3.0.101-108.132.1 kernel-bigmem-devel-3.0.101-108.132.1 kernel-default-3.0.101-108.132.1 kernel-default-base-3.0.101-108.132.1 kernel-default-devel-3.0.101-108.132.1 kernel-default-man-3.0.101-108.132.1 kernel-ec2-3.0.101-108.132.1 kernel-ec2-base-3.0.101-108.132.1 kernel-ec2-devel-3.0.101-108.132.1 kernel-pae-3.0.101-108.132.1 kernel-pae-base-3.0.101-108.132.1 kernel-pae-devel-3.0.101-108.132.1 kernel-ppc64-3.0.101-108.132.1 kernel-ppc64-base-3.0.101-108.132.1 kernel-ppc64-devel-3.0.101-108.132.1 kernel-source-3.0.101-108.132.1 kernel-syms-3.0.101-108.132.1 kernel-trace-3.0.101-108.132.1 kernel-trace-base-3.0.101-108.132.1 kernel-trace-devel-3.0.101-108.132.1 kernel-xen-3.0.101-108.132.1 kernel-xen-base-3.0.101-108.132.1 kernel-xen-devel-3.0.101-108.132.1 kernel-bigmem-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-bigmem-base-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-bigmem-devel-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-default-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-default-base-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-default-devel-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-default-man-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ec2-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ec2-base-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ec2-devel-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-pae-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-pae-base-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-pae-devel-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ppc64-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ppc64-base-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ppc64-devel-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-source-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-syms-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-trace-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-trace-base-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-trace-devel-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-xen-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-xen-base-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-xen-devel-3.0.101-108.132.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk. CVE-2014-7841 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2014-7841.html CVE-2014-7841 https://bugzilla.suse.com/904899 SUSE Bug 904899 https://bugzilla.suse.com/905100 SUSE Bug 905100 An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c. CVE-2020-36385 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2020-36385.html CVE-2020-36385 https://bugzilla.suse.com/1187050 SUSE Bug 1187050 https://bugzilla.suse.com/1187052 SUSE Bug 1187052 https://bugzilla.suse.com/1189302 SUSE Bug 1189302 https://bugzilla.suse.com/1196174 SUSE Bug 1196174 https://bugzilla.suse.com/1196810 SUSE Bug 1196810 https://bugzilla.suse.com/1196914 SUSE Bug 1196914 https://bugzilla.suse.com/1200084 SUSE Bug 1200084 https://bugzilla.suse.com/1201734 SUSE Bug 1201734 A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability. CVE-2021-20265 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-20265.html CVE-2021-20265 https://bugzilla.suse.com/1183089 SUSE Bug 1183089 https://bugzilla.suse.com/1214268 SUSE Bug 1214268 The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value. CVE-2021-33033 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-33033.html CVE-2021-33033 https://bugzilla.suse.com/1186109 SUSE Bug 1186109 https://bugzilla.suse.com/1186283 SUSE Bug 1186283 https://bugzilla.suse.com/1188876 SUSE Bug 1188876 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-42739. Reason: This candidate is a reservation duplicate of CVE-2021-42739. Notes: All CVE users should reference CVE-2021-42739 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. CVE-2021-3542 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-3542.html CVE-2021-3542 https://bugzilla.suse.com/1184673 SUSE Bug 1184673 https://bugzilla.suse.com/1186063 SUSE Bug 1186063 .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root. CVE-2021-3609 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-3609.html CVE-2021-3609 https://bugzilla.suse.com/1187215 SUSE Bug 1187215 https://bugzilla.suse.com/1188323 SUSE Bug 1188323 https://bugzilla.suse.com/1188720 SUSE Bug 1188720 https://bugzilla.suse.com/1190276 SUSE Bug 1190276 https://bugzilla.suse.com/1196810 SUSE Bug 1196810 A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system. CVE-2021-3640 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-3640.html CVE-2021-3640 https://bugzilla.suse.com/1188172 SUSE Bug 1188172 https://bugzilla.suse.com/1188613 SUSE Bug 1188613 https://bugzilla.suse.com/1191530 SUSE Bug 1191530 https://bugzilla.suse.com/1196810 SUSE Bug 1196810 https://bugzilla.suse.com/1196914 SUSE Bug 1196914 A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7. CVE-2021-3653 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-3653.html CVE-2021-3653 https://bugzilla.suse.com/1189399 SUSE Bug 1189399 https://bugzilla.suse.com/1189420 SUSE Bug 1189420 https://bugzilla.suse.com/1196914 SUSE Bug 1196914 A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory. CVE-2021-3655 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-3655.html CVE-2021-3655 https://bugzilla.suse.com/1188563 SUSE Bug 1188563 A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service. CVE-2021-3679 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-3679.html CVE-2021-3679 https://bugzilla.suse.com/1189057 SUSE Bug 1189057 hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free. CVE-2021-37159 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-37159.html CVE-2021-37159 https://bugzilla.suse.com/1188601 SUSE Bug 1188601 A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses. CVE-2021-3772 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-3772.html CVE-2021-3772 https://bugzilla.suse.com/1190351 SUSE Bug 1190351 ** DISPUTED ** In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any existing use case; the length validation was added solely for robustness in the face of anomalous host OS behavior. CVE-2021-38160 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-38160.html CVE-2021-38160 https://bugzilla.suse.com/1190117 SUSE Bug 1190117 https://bugzilla.suse.com/1190118 SUSE Bug 1190118 https://bugzilla.suse.com/1196914 SUSE Bug 1196914 arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault. CVE-2021-38198 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-38198.html CVE-2021-38198 https://bugzilla.suse.com/1189262 SUSE Bug 1189262 https://bugzilla.suse.com/1189278 SUSE Bug 1189278 https://bugzilla.suse.com/1196914 SUSE Bug 1196914 The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access. CVE-2021-42008 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-42008.html CVE-2021-42008 https://bugzilla.suse.com/1191315 SUSE Bug 1191315 https://bugzilla.suse.com/1191660 SUSE Bug 1191660 https://bugzilla.suse.com/1196722 SUSE Bug 1196722 https://bugzilla.suse.com/1196810 SUSE Bug 1196810 https://bugzilla.suse.com/1196914 SUSE Bug 1196914 A heap-based buffer overflow flaw was found in the Linux kernel FireDTV media card driver, where the user calls the CA_SEND_MSG ioctl. This flaw allows a local user of the host machine to crash the system or escalate privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2021-42739 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-42739.html CVE-2021-42739 https://bugzilla.suse.com/1184673 SUSE Bug 1184673 https://bugzilla.suse.com/1192036 SUSE Bug 1192036 https://bugzilla.suse.com/1196722 SUSE Bug 1196722 https://bugzilla.suse.com/1196914 SUSE Bug 1196914 An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c. CVE-2021-43389 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.132.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.132.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-202114849-1/ https://www.suse.com/security/cve/CVE-2021-43389.html CVE-2021-43389 https://bugzilla.suse.com/1191958 SUSE Bug 1191958