Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP3) SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:3361-1 Final 1 1 2021-10-12T11:58:26Z current 2021-10-12T11:58:26Z 2021-10-12T11:58:26Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP3) This update for the Linux Kernel 5.3.18-59_19 fixes several issues. The following security issues were fixed: - CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613) - CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-3361,SUSE-SLE-Live-Patching-12-SP5-2021-3373,SUSE-SLE-Module-Live-Patching-15-SP2-2021-3361,SUSE-SLE-Module-Live-Patching-15-SP3-2021-3355 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20213361-1/ Link for SUSE-SU-2021:3361-1 https://lists.suse.com/pipermail/sle-security-updates/2021-October/009574.html E-Mail link for SUSE-SU-2021:3361-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1187054 SUSE Bug 1187054 https://bugzilla.suse.com/1188613 SUSE Bug 1188613 https://www.suse.com/security/cve/CVE-2021-3573/ SUSE CVE CVE-2021-3573 page https://www.suse.com/security/cve/CVE-2021-3640/ SUSE CVE CVE-2021-3640 page SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Live Patching 15 SP2 SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-24_78-default-3-2.1 kernel-livepatch-5_3_18-24_78-preempt-3-2.1 kgraft-patch-4_12_14-122_83-default-3-2.1 kernel-livepatch-5_3_18-59_19-default-3-2.1 kgraft-patch-4_12_14-122_83-default-3-2.1 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-livepatch-5_3_18-24_78-default-3-2.1 as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-livepatch-5_3_18-59_19-default-3-2.1 as a component of SUSE Linux Enterprise Live Patching 15 SP3 A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5. CVE-2021-3573 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_83-default-3-2.1 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_78-default-3-2.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_19-default-3-2.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213361-1/ https://www.suse.com/security/cve/CVE-2021-3573.html CVE-2021-3573 https://bugzilla.suse.com/1186666 SUSE Bug 1186666 https://bugzilla.suse.com/1187054 SUSE Bug 1187054 https://bugzilla.suse.com/1188172 SUSE Bug 1188172 A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system. CVE-2021-3640 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_83-default-3-2.1 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_78-default-3-2.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_19-default-3-2.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213361-1/ https://www.suse.com/security/cve/CVE-2021-3640.html CVE-2021-3640 https://bugzilla.suse.com/1188172 SUSE Bug 1188172 https://bugzilla.suse.com/1188613 SUSE Bug 1188613 https://bugzilla.suse.com/1191530 SUSE Bug 1191530 https://bugzilla.suse.com/1196810 SUSE Bug 1196810 https://bugzilla.suse.com/1196914 SUSE Bug 1196914