Lucene search

K
mageiaGentoo FoundationMGASA-2021-0419
HistorySep 08, 2021 - 12:23 p.m.

Updated kernel-linus packages fix security vulnerabilities

2021-09-0812:23:46
Gentoo Foundation
advisories.mageia.org
24

0.001 Low

EPSS

Percentile

30.1%

This kernel-linus update is based on upstream 5.10.62 and fixes at least the following security issues: Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic in ath9k (CVE-2020-3702). A process with CAP_SYS_ADMIN can cause a kernel NULL pointer dereference in btrfs code (CVE-2021-3739). there is an out-of-bound read bug in qrtr_endpoint_post in net/qrtr/qrtr.c (CVE-2021-3743). An out-of-bounds read due to a race condition has been found in the Linux kernel due to write access to vc_mode is not protected by a lock in vt_ioctl (KDSETMDE) (CVE-2021-3753). For other upstream fixes, see the referenced changelogs.

OSVersionArchitecturePackageVersionFilename
Mageia8noarchkernel-linus< 5.10.62-1kernel-linus-5.10.62-1.mga8