Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:2415-1 Final 1 1 2021-07-20T14:12:08Z current 2021-07-20T14:12:08Z 2021-07-20T14:12:08Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. Security issues fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116). - CVE-2021-33909: Extremely large seq buffer allocations in seq_file could lead to buffer underruns and code execution (bsc#1188062). The following non-security bugs were fixed: - usb: dwc3: Fix debugfs creation flow (git-fixes). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro-rancher/5.2:latest-2021-2415,Container suse/sles/15.3/libguestfs-tools:0.45.0-2021-2415,Image SLES15-SP3-BYOS-Azure-2021-2415,Image SLES15-SP3-BYOS-EC2-HVM-2021-2415,Image SLES15-SP3-BYOS-GCE-2021-2415,Image SLES15-SP3-CHOST-BYOS-Aliyun-2021-2415,Image SLES15-SP3-CHOST-BYOS-Azure-2021-2415,Image SLES15-SP3-CHOST-BYOS-EC2-2021-2415,Image SLES15-SP3-CHOST-BYOS-GCE-2021-2415,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2021-2415,Image SLES15-SP3-EC2-ECS-HVM-2021-2415,Image SLES15-SP3-EC2-HVM-2021-2415,Image SLES15-SP3-GCE-2021-2415,Image SLES15-SP3-HPC-BYOS-Azure-2021-2415,Image SLES15-SP3-HPC-BYOS-EC2-HVM-2021-2415,Image SLES15-SP3-HPC-BYOS-GCE-2021-2415,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2021-2415,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2021-2415,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2021-2415,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2021-2415,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2021-2415,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2021-2415,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2021-2415,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2021-2415,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2021-2415,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2021-2415,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2021-2415,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2021-2415,Image SLES15-SP3-Micro-BYOS-GCE-2021-2415,Image SLES15-SP3-SAP-Azure-2021-2415,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2021-2415,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2021-2415,Image SLES15-SP3-SAP-BYOS-Azure-2021-2415,Image SLES15-SP3-SAP-BYOS-EC2-HVM-2021-2415,Image SLES15-SP3-SAP-BYOS-GCE-2021-2415,Image SLES15-SP3-SAP-EC2-HVM-2021-2415,Image SLES15-SP3-SAP-GCE-2021-2415,Image SLES15-SP3-SAPCAL-Azure-2021-2415,Image SLES15-SP3-SAPCAL-EC2-HVM-2021-2415,Image SLES15-SP3-SAPCAL-GCE-2021-2415,SUSE-2021-2415,SUSE-SLE-Module-Basesystem-15-SP3-2021-2415,SUSE-SLE-Module-Development-Tools-15-SP3-2021-2415,SUSE-SLE-Module-Legacy-15-SP3-2021-2415,SUSE-SLE-Module-Live-Patching-15-SP3-2021-2415,SUSE-SLE-Product-HA-15-SP3-2021-2415,SUSE-SLE-Product-WE-15-SP3-2021-2415 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20212415-1/ Link for SUSE-SU-2021:2415-1 https://lists.suse.com/pipermail/sle-security-updates/2021-July/009170.html E-Mail link for SUSE-SU-2021:2415-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1188062 SUSE Bug 1188062 https://bugzilla.suse.com/1188116 SUSE Bug 1188116 https://www.suse.com/security/cve/CVE-2021-22555/ SUSE CVE CVE-2021-22555 page https://www.suse.com/security/cve/CVE-2021-33909/ SUSE CVE CVE-2021-33909 page Container suse/sle-micro-rancher/5.2:latest Container suse/sles/15.3/libguestfs-tools:0.45.0 Image SLES15-SP3-BYOS-Azure Image SLES15-SP3-BYOS-EC2-HVM Image SLES15-SP3-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-EC2-ECS-HVM Image SLES15-SP3-EC2-HVM Image SLES15-SP3-GCE Image SLES15-SP3-HPC-BYOS-Azure Image SLES15-SP3-HPC-BYOS-EC2-HVM Image SLES15-SP3-HPC-BYOS-GCE Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-Micro-BYOS-GCE Image SLES15-SP3-SAP-Azure Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP3-SAP-EC2-HVM Image SLES15-SP3-SAP-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE SUSE Linux Enterprise High Availability Extension 15 SP3 SUSE Linux Enterprise Live Patching 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP3 kernel-default-5.3.18-59.16.1 kernel-kvmsmall-5.3.18-59.16.1 cluster-md-kmp-default-5.3.18-59.16.1 dlm-kmp-default-5.3.18-59.16.1 gfs2-kmp-default-5.3.18-59.16.1 ocfs2-kmp-default-5.3.18-59.16.1 cluster-md-kmp-64kb-5.3.18-59.16.1 cluster-md-kmp-preempt-5.3.18-59.16.1 dlm-kmp-64kb-5.3.18-59.16.1 dlm-kmp-preempt-5.3.18-59.16.1 dtb-al-5.3.18-59.16.1 dtb-allwinner-5.3.18-59.16.1 dtb-altera-5.3.18-59.16.1 dtb-amd-5.3.18-59.16.1 dtb-amlogic-5.3.18-59.16.1 dtb-apm-5.3.18-59.16.1 dtb-arm-5.3.18-59.16.1 dtb-broadcom-5.3.18-59.16.1 dtb-cavium-5.3.18-59.16.1 dtb-exynos-5.3.18-59.16.1 dtb-freescale-5.3.18-59.16.1 dtb-hisilicon-5.3.18-59.16.1 dtb-lg-5.3.18-59.16.1 dtb-marvell-5.3.18-59.16.1 dtb-mediatek-5.3.18-59.16.1 dtb-nvidia-5.3.18-59.16.1 dtb-qcom-5.3.18-59.16.1 dtb-renesas-5.3.18-59.16.1 dtb-rockchip-5.3.18-59.16.1 dtb-socionext-5.3.18-59.16.1 dtb-sprd-5.3.18-59.16.1 dtb-xilinx-5.3.18-59.16.1 dtb-zte-5.3.18-59.16.1 gfs2-kmp-64kb-5.3.18-59.16.1 gfs2-kmp-preempt-5.3.18-59.16.1 kernel-64kb-5.3.18-59.16.1 kernel-64kb-devel-5.3.18-59.16.1 kernel-64kb-extra-5.3.18-59.16.1 kernel-64kb-livepatch-devel-5.3.18-59.16.1 kernel-64kb-optional-5.3.18-59.16.1 kernel-debug-5.3.18-59.16.1 kernel-debug-devel-5.3.18-59.16.1 kernel-debug-livepatch-devel-5.3.18-59.16.1 kernel-default-base-5.3.18-59.16.1.18.8.1 kernel-default-base-rebuild-5.3.18-59.16.1.18.8.1 kernel-default-devel-5.3.18-59.16.1 kernel-default-extra-5.3.18-59.16.1 kernel-default-livepatch-5.3.18-59.16.1 kernel-default-livepatch-devel-5.3.18-59.16.1 kernel-default-optional-5.3.18-59.16.1 kernel-devel-5.3.18-59.16.1 kernel-docs-5.3.18-59.16.1 kernel-docs-html-5.3.18-59.16.1 kernel-kvmsmall-devel-5.3.18-59.16.1 kernel-kvmsmall-livepatch-devel-5.3.18-59.16.1 kernel-livepatch-5_3_18-59_16-default-1-7.3.1 kernel-livepatch-5_3_18-59_16-preempt-1-7.3.1 kernel-macros-5.3.18-59.16.1 kernel-obs-build-5.3.18-59.16.1 kernel-obs-qa-5.3.18-59.16.1 kernel-preempt-5.3.18-59.16.1 kernel-preempt-devel-5.3.18-59.16.1 kernel-preempt-extra-5.3.18-59.16.1 kernel-preempt-livepatch-devel-5.3.18-59.16.1 kernel-preempt-optional-5.3.18-59.16.1 kernel-source-5.3.18-59.16.1 kernel-source-vanilla-5.3.18-59.16.1 kernel-syms-5.3.18-59.16.1 kernel-zfcpdump-5.3.18-59.16.1 kselftests-kmp-64kb-5.3.18-59.16.1 kselftests-kmp-default-5.3.18-59.16.1 kselftests-kmp-preempt-5.3.18-59.16.1 ocfs2-kmp-64kb-5.3.18-59.16.1 ocfs2-kmp-preempt-5.3.18-59.16.1 reiserfs-kmp-64kb-5.3.18-59.16.1 reiserfs-kmp-default-5.3.18-59.16.1 reiserfs-kmp-preempt-5.3.18-59.16.1 kernel-default-5.3.18-59.16.1 as a component of Container suse/sle-micro-rancher/5.2:latest kernel-kvmsmall-5.3.18-59.16.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-BYOS-Azure kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-BYOS-GCE kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-EC2-ECS-HVM kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-EC2-HVM kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-GCE kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-Micro-BYOS-GCE kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-Azure cluster-md-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production dlm-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production gfs2-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production ocfs2-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production cluster-md-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production dlm-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production gfs2-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production ocfs2-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production cluster-md-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure dlm-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure gfs2-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure ocfs2-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure cluster-md-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM dlm-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM gfs2-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM ocfs2-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM cluster-md-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE dlm-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE gfs2-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE ocfs2-kmp-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-EC2-HVM kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAP-GCE kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAPCAL-Azure kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM kernel-default-5.3.18-59.16.1 as a component of Image SLES15-SP3-SAPCAL-GCE cluster-md-kmp-default-5.3.18-59.16.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 dlm-kmp-default-5.3.18-59.16.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 gfs2-kmp-default-5.3.18-59.16.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 ocfs2-kmp-default-5.3.18-59.16.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 kernel-default-livepatch-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default-livepatch-devel-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-59_16-default-1-7.3.1 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-64kb-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-64kb-devel-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-default-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-default-base-5.3.18-59.16.1.18.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-default-devel-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-devel-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-macros-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-preempt-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-zfcpdump-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-docs-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-obs-build-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-preempt-devel-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-source-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-syms-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 reiserfs-kmp-default-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP3 kernel-default-extra-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 kernel-preempt-extra-5.3.18-59.16.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space CVE-2021-22555 Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-59.16.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:kernel-kvmsmall-5.3.18-59.16.1 Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-CHOST-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-CHOST-BYOS-EC2:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-CHOST-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-EC2-ECS-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-HPC-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-HPC-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-Azure:cluster-md-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-Azure:dlm-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-Azure:gfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-Azure:ocfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:cluster-md-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:dlm-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:ocfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-GCE:cluster-md-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-GCE:dlm-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-GCE:gfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-GCE:ocfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAPCAL-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAPCAL-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAPCAL-GCE:kernel-default-5.3.18-59.16.1 SUSE Linux Enterprise High Availability Extension 15 SP3:cluster-md-kmp-default-5.3.18-59.16.1 SUSE Linux Enterprise High Availability Extension 15 SP3:dlm-kmp-default-5.3.18-59.16.1 SUSE Linux Enterprise High Availability Extension 15 SP3:gfs2-kmp-default-5.3.18-59.16.1 SUSE Linux Enterprise High Availability Extension 15 SP3:ocfs2-kmp-default-5.3.18-59.16.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-5.3.18-59.16.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel-5.3.18-59.16.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_16-default-1-7.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-64kb-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-64kb-devel-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-default-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-default-base-5.3.18-59.16.1.18.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-default-devel-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-devel-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-macros-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-preempt-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-zfcpdump-5.3.18-59.16.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:kernel-docs-5.3.18-59.16.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:kernel-obs-build-5.3.18-59.16.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:kernel-preempt-devel-5.3.18-59.16.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:kernel-source-5.3.18-59.16.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:kernel-syms-5.3.18-59.16.1 SUSE Linux Enterprise Module for Legacy 15 SP3:reiserfs-kmp-default-5.3.18-59.16.1 SUSE Linux Enterprise Workstation Extension 15 SP3:kernel-default-extra-5.3.18-59.16.1 SUSE Linux Enterprise Workstation Extension 15 SP3:kernel-preempt-extra-5.3.18-59.16.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212415-1/ https://www.suse.com/security/cve/CVE-2021-22555.html CVE-2021-22555 https://bugzilla.suse.com/1188116 SUSE Bug 1188116 https://bugzilla.suse.com/1188117 SUSE Bug 1188117 https://bugzilla.suse.com/1188411 SUSE Bug 1188411 fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05. CVE-2021-33909 Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-59.16.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:kernel-kvmsmall-5.3.18-59.16.1 Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-CHOST-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-CHOST-BYOS-EC2:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-CHOST-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-EC2-ECS-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-HPC-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-HPC-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-Micro-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-Azure:cluster-md-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-Azure:dlm-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-Azure:gfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-Azure:ocfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:cluster-md-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:dlm-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:ocfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-GCE:cluster-md-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-GCE:dlm-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-GCE:gfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-BYOS-GCE:ocfs2-kmp-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAP-GCE:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAPCAL-Azure:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAPCAL-EC2-HVM:kernel-default-5.3.18-59.16.1 Image SLES15-SP3-SAPCAL-GCE:kernel-default-5.3.18-59.16.1 SUSE Linux Enterprise High Availability Extension 15 SP3:cluster-md-kmp-default-5.3.18-59.16.1 SUSE Linux Enterprise High Availability Extension 15 SP3:dlm-kmp-default-5.3.18-59.16.1 SUSE Linux Enterprise High Availability Extension 15 SP3:gfs2-kmp-default-5.3.18-59.16.1 SUSE Linux Enterprise High Availability Extension 15 SP3:ocfs2-kmp-default-5.3.18-59.16.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-5.3.18-59.16.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel-5.3.18-59.16.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_16-default-1-7.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-64kb-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-64kb-devel-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-default-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-default-base-5.3.18-59.16.1.18.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-default-devel-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-devel-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-macros-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-preempt-5.3.18-59.16.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-zfcpdump-5.3.18-59.16.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:kernel-docs-5.3.18-59.16.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:kernel-obs-build-5.3.18-59.16.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:kernel-preempt-devel-5.3.18-59.16.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:kernel-source-5.3.18-59.16.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:kernel-syms-5.3.18-59.16.1 SUSE Linux Enterprise Module for Legacy 15 SP3:reiserfs-kmp-default-5.3.18-59.16.1 SUSE Linux Enterprise Workstation Extension 15 SP3:kernel-default-extra-5.3.18-59.16.1 SUSE Linux Enterprise Workstation Extension 15 SP3:kernel-preempt-extra-5.3.18-59.16.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212415-1/ https://www.suse.com/security/cve/CVE-2021-33909.html CVE-2021-33909 https://bugzilla.suse.com/1188062 SUSE Bug 1188062 https://bugzilla.suse.com/1188063 SUSE Bug 1188063 https://bugzilla.suse.com/1188257 SUSE Bug 1188257 https://bugzilla.suse.com/1189302 SUSE Bug 1189302 https://bugzilla.suse.com/1190859 SUSE Bug 1190859