CVE-2021-4001

A race condition was found in the Linux kernel's ebpf verifier between bpfmapupdateelem and bpfmapfreeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege capsysadmin or capbpf can modify the frozen mapped address space. Mitigation Mitigation for...

SUSE SLES15: kernel-livepatch-5_3_18-24_86-default / etc (SUSE-SU-2021:3743-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:3743-1 advisory. This update for the Linux Kernel 5.3.18-2486 fixes one issue. The following security issue was fixed: - CVE-2021-41864: Fixed an integer overflow with ...

SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP3) (SUSE-SU-2021:3738-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3738-1 advisory. This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2021-3752: Fixed vulnerability...

SUSE SLES12: kernel-livepatch-4_12_14-150_66-default / etc (SUSE-SU-2021:3735-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3735-1 advisory. This update for the Linux Kernel 4.12.14-12260 fixes several issues. The following security issues were fixed: - CVE-2021-0935: Fixed...

SUSE SLES15 Security Update : kernel (Live Patch 1 for SLE 15 SP3) (SUSE-SU-2021:3742-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3742-1 advisory. This update for the Linux Kernel 5.3.18-595 fixes several issues. The following security issues were fixed: - CVE-2021-34866: Fixed possible eB...

SUSE-SU-2021:3742-1 Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-5919 fixes several issues. The following security issues were fixed: - CVE-2021-34866: Fixed possible eBPF Type Confusion privilege escalation vulnerability via eBPF type confusion bsc1191646. - CVE-2021-41864: Fixed an integer overflow with a resultant...

SUSE SLES15 Security Update : kernel (Live Patch 14 for SLE 15 SP2) (SUSE-SU-2021:3712-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2021:3712-1 advisory. This update for the Linux Kernel 5.3.18-2467 fixes one issue. The following security issue was fixed: - CVE-2021-41864: Fixed an integer overflow with ...

SUSE SLES12 Security Update : kernel (Live Patch 24 for SLE 12 SP5) (SUSE-SU-2021:3692-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3692-1 advisory. This update for the Linux Kernel 4.12.14-12291 fixes several issues. The following security issues were fixed: - CVE-2021-0935: Fixed use after...

SUSE SLES12: kernel-livepatch-4_12_14-150_63-default / etc (SUSE-SU-2021:3684-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3684-1 advisory. This update for the Linux Kernel 4.12.14-12251 fixes several issues. The following security issues were fixed: - CVE-2021-0935: Fixed...

SUSE SLES15 Security Update : kernel (Live Patch 3 for SLE 15 SP3) (SUSE-SU-2021:3718-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3718-1 advisory. This update for the Linux Kernel 5.3.18-5913 fixes several issues. The following security issues were fixed: - CVE-2021-34866: Fixed possible...

SUSE-SU-2021:3718-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-5924 fixes several issues. The following security issues were fixed: - CVE-2021-34866: Fixed possible eBPF Type Confusion privilege escalation vulnerability via eBPF type confusion bsc1191646. - CVE-2021-41864: Fixed an integer overflow with a resultant...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3675-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3675-1 advisory. - CVE-2021-3542: Fixed heap buffer overflow in firedtv driver bsc1186063. - CVE-2021-3655: Fixed a missing size validations on inbound...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:3675-1 Rating: important References: 1065729 1085030 1089118 1094840 1133021 1152472 1152489 1154353 1156395 1157177 1167773 1172073 1173604 1176447 1176774 1176914 1176940 1178134 1180100 1180749...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3655-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3655-1 advisory. The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. NOTE: This update was retracted due to a...

openSUSE 15 Security Update : kernel (openSUSE-SU-2021:3655-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3655-1 advisory. The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. NOTE: This update was retracted due to a NFS...

Ubuntu: Security Advisory (USN-5139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5140-1: Linux kernel (OEM 5.14) vulnerabilities

It was discovered that the AMD Cryptographic Coprocessor CCP driver in the Linux kernel did not properly deallocate memory in some error conditions. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2021-3744, CVE-2021-3764 It was discovered that an integer...

USN-5140-1 linux-oem-5.14 vulnerabilities

It was discovered that the AMD Cryptographic Coprocessor CCP driver in the Linux kernel did not properly deallocate memory in some error conditions. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2021-3744, CVE-2021-3764 It was discovered that an integer...

USN-5139-1: Linux kernel (OEM 5.10) vulnerabilities

Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the AMD...