SUSE-SU-2021:2198-1

Vulnerability from csaf_suse - Published: 2021-06-29 08:59 - Updated: 2026-09-20 14:00
Summary
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)
Description of the patch: This update for the Linux Kernel 5.3.18-57 fixes several issues. The following issues were fixed: - CVE-2021-3489: Fixed an issue where the eBPF RINGBUF bpf_ringbuf_reserve did not check that the allocated size was smaller than the ringbuf size (bsc#1185640). - CVE-2021-3490: Fixed an issue where the eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) did not update the 32-bit bounds (bsc#1185641). - CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111). - CVE-2021-32399: Fixed a race condition when removing the HCI controller (bsc#1184611). - CVE-2020-36322: Fixed an issue was discovered in FUSE filesystem implementation which could have caused a system crash (bsc#1184211). - CVE-2021-29154: Fixed incorrect computation of branch displacements, allowing arbitrary code execution (bsc#1184391). - CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183593). - Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185847).
Patchnames: SUSE-2021-2198,SUSE-SLE-Module-Live-Patching-15-SP3-2021-2198
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2020-36322
7.7 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2021-28660
8 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 3 products, the same list as for CVE-2020-36322
Threats
Impact important
CVE-2021-29154
7 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 3 products, the same list as for CVE-2020-36322
Threats
Impact important
CVE-2021-32399
7.4 (High)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 3 products, the same list as for CVE-2020-36322
Threats
Impact important
CVE-2021-33034
7.7 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected products
Recommended 3 products, the same list as for CVE-2020-36322
Threats
Impact important
CVE-2021-3489
8.4 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 3 products, the same list as for CVE-2020-36322
Threats
Impact important
CVE-2021-3490
8.4 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 3 products, the same list as for CVE-2020-36322
Threats
Impact important
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1183658 self
https://bugzilla.suse.com/1184710 self
https://bugzilla.suse.com/1184952 self
https://bugzilla.suse.com/1185796 self
https://bugzilla.suse.com/1185847 self
https://bugzilla.suse.com/1185856 self
https://bugzilla.suse.com/1185899 self
https://bugzilla.suse.com/1186285 self
https://www.suse.com/security/cve/CVE-2020-36322/ self
https://www.suse.com/security/cve/CVE-2021-28660/ self
https://www.suse.com/security/cve/CVE-2021-29154/ self
https://www.suse.com/security/cve/CVE-2021-32399/ self
https://www.suse.com/security/cve/CVE-2021-33034/ self
https://www.suse.com/security/cve/CVE-2021-3489/ self
https://www.suse.com/security/cve/CVE-2021-3490/ self
https://www.suse.com/security/cve/CVE-2020-36322 external
https://bugzilla.suse.com/1184211 external
https://bugzilla.suse.com/1184952 external
https://bugzilla.suse.com/1189302 external
https://www.suse.com/security/cve/CVE-2021-28660 external
https://bugzilla.suse.com/1183593 external
https://bugzilla.suse.com/1183658 external
https://www.suse.com/security/cve/CVE-2021-29154 external
https://bugzilla.suse.com/1184391 external
https://bugzilla.suse.com/1184710 external
https://bugzilla.suse.com/1186408 external
https://www.suse.com/security/cve/CVE-2021-32399 external
https://bugzilla.suse.com/1184611 external
https://bugzilla.suse.com/1185898 external
https://bugzilla.suse.com/1185899 external
https://bugzilla.suse.com/1196174 external
https://bugzilla.suse.com/1200084 external
https://bugzilla.suse.com/1201734 external
https://www.suse.com/security/cve/CVE-2021-33034 external
https://bugzilla.suse.com/1186111 external
https://bugzilla.suse.com/1186285 external
https://www.suse.com/security/cve/CVE-2021-3489 external
https://bugzilla.suse.com/1185640 external
https://bugzilla.suse.com/1185856 external
https://www.suse.com/security/cve/CVE-2021-3490 external
https://bugzilla.suse.com/1185641 external
https://bugzilla.suse.com/1185796 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for the Linux Kernel 5.3.18-57 fixes several issues.\n\nThe following issues were fixed:\n\n- CVE-2021-3489: Fixed an issue where the eBPF RINGBUF bpf_ringbuf_reserve did not check that the allocated size was smaller than the ringbuf size (bsc#1185640).\n- CVE-2021-3490: Fixed an issue where the eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) did not update the 32-bit bounds (bsc#1185641).\n- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).\n- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bsc#1184611).\n- CVE-2020-36322: Fixed an issue was discovered in FUSE filesystem implementation which could have caused a system crash (bsc#1184211).\n- CVE-2021-29154: Fixed incorrect computation of branch displacements, allowing arbitrary code execution (bsc#1184391).\n- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183593).\n- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185847).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2021-2198,SUSE-SLE-Module-Live-Patching-15-SP3-2021-2198",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_2198-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2021:2198-1",
        "url": "https://www.suse.com/support/update/announcement/2021/suse-su-20212198-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2021:2198-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-June/009102.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1183658",
        "url": "https://bugzilla.suse.com/1183658"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1184710",
        "url": "https://bugzilla.suse.com/1184710"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1184952",
        "url": "https://bugzilla.suse.com/1184952"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185796",
        "url": "https://bugzilla.suse.com/1185796"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185847",
        "url": "https://bugzilla.suse.com/1185847"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185856",
        "url": "https://bugzilla.suse.com/1185856"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185899",
        "url": "https://bugzilla.suse.com/1185899"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186285",
        "url": "https://bugzilla.suse.com/1186285"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-36322 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-36322/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-28660 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-28660/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-29154 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-29154/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32399 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32399/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-33034 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-33034/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3489 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3489/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3490 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3490/"
      }
    ],
    "title": "Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)",
    "tracking": {
      "current_release_date": "2026-09-20T14:00:28Z",
      "generator": {
        "date": "2021-06-29T08:59:01Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2021:2198-1",
      "initial_release_date": "2021-06-29T08:59:01Z",
      "revision_history": [
        {
          "date": "2021-06-29T08:59:01Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T14:00:28Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
                "product": {
                  "name": "kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
                  "product_id": "kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-livepatch-5_3_18-57-default@2-3.1?arch=ppc64le\u0026upstream=kernel-livepatch-SLE15-SP3_Update_0-0:2-3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
                "product": {
                  "name": "kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
                  "product_id": "kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-livepatch-5_3_18-57-default@2-3.1?arch=s390x\u0026upstream=kernel-livepatch-SLE15-SP3_Update_0-0:2-3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64",
                "product": {
                  "name": "kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64",
                  "product_id": "kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-livepatch-5_3_18-57-default@2-3.1?arch=x86_64\u0026upstream=kernel-livepatch-SLE15-SP3_Update_0-0:2-3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-livepatch-5_3_18-57-preempt-0:2-3.1.x86_64",
                "product": {
                  "name": "kernel-livepatch-5_3_18-57-preempt-0:2-3.1.x86_64",
                  "product_id": "kernel-livepatch-5_3_18-57-preempt-0:2-3.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-livepatch-5_3_18-57-preempt@2-3.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Live Patching 15 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Live Patching 15 SP3",
                  "product_id": "SUSE Linux Enterprise Live Patching 15 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-live-patching:15:sp3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP3",
          "product_id": "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le"
        },
        "product_reference": "kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP3",
          "product_id": "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x"
        },
        "product_reference": "kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP3",
          "product_id": "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
        },
        "product_reference": "kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-36322",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-36322"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-36322",
          "url": "https://www.suse.com/security/cve/CVE-2020-36322"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1184211 for CVE-2020-36322",
          "url": "https://bugzilla.suse.com/1184211"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1184952 for CVE-2020-36322",
          "url": "https://bugzilla.suse.com/1184952"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1189302 for CVE-2020-36322",
          "url": "https://bugzilla.suse.com/1189302"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-29T08:59:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-36322"
    },
    {
      "cve": "CVE-2021-28660",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-28660"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the -\u003essid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-28660",
          "url": "https://www.suse.com/security/cve/CVE-2021-28660"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183593 for CVE-2021-28660",
          "url": "https://bugzilla.suse.com/1183593"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183658 for CVE-2021-28660",
          "url": "https://bugzilla.suse.com/1183658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-29T08:59:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-28660"
    },
    {
      "cve": "CVE-2021-29154",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-29154"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-29154",
          "url": "https://www.suse.com/security/cve/CVE-2021-29154"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1184391 for CVE-2021-29154",
          "url": "https://bugzilla.suse.com/1184391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1184710 for CVE-2021-29154",
          "url": "https://bugzilla.suse.com/1184710"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186408 for CVE-2021-29154",
          "url": "https://bugzilla.suse.com/1186408"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-29T08:59:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-29154"
    },
    {
      "cve": "CVE-2021-32399",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32399"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32399",
          "url": "https://www.suse.com/security/cve/CVE-2021-32399"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1184611 for CVE-2021-32399",
          "url": "https://bugzilla.suse.com/1184611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185898 for CVE-2021-32399",
          "url": "https://bugzilla.suse.com/1185898"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185899 for CVE-2021-32399",
          "url": "https://bugzilla.suse.com/1185899"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196174 for CVE-2021-32399",
          "url": "https://bugzilla.suse.com/1196174"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200084 for CVE-2021-32399",
          "url": "https://bugzilla.suse.com/1200084"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201734 for CVE-2021-32399",
          "url": "https://bugzilla.suse.com/1201734"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-29T08:59:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-32399"
    },
    {
      "cve": "CVE-2021-33034",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-33034"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-33034",
          "url": "https://www.suse.com/security/cve/CVE-2021-33034"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186111 for CVE-2021-33034",
          "url": "https://bugzilla.suse.com/1186111"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186285 for CVE-2021-33034",
          "url": "https://bugzilla.suse.com/1186285"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-29T08:59:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-33034"
    },
    {
      "cve": "CVE-2021-3489",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3489"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee (\"bpf, ringbuf: Deny reserve of buffers larger than ringbuf\") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced via 457f44363a88 (\"bpf: Implement BPF ring buffer and verifier support for it\") (v5.8-rc1).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3489",
          "url": "https://www.suse.com/security/cve/CVE-2021-3489"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185640 for CVE-2021-3489",
          "url": "https://bugzilla.suse.com/1185640"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185856 for CVE-2021-3489",
          "url": "https://bugzilla.suse.com/1185856"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-29T08:59:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-3489"
    },
    {
      "cve": "CVE-2021-3490",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3490"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e (\"bpf: Fix alu32 const subreg bound tracking on bitwise operations\") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. The AND/OR issues were introduced by commit 3f50f132d840 (\"bpf: Verifier, do explicit ALU32 bounds tracking\") (5.7-rc1) and the XOR variant was introduced by 2921c90d4718 (\"bpf:Fix a verifier failure with xor\") ( 5.10-rc1).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
          "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3490",
          "url": "https://www.suse.com/security/cve/CVE-2021-3490"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185641 for CVE-2021-3490",
          "url": "https://bugzilla.suse.com/1185641"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185796 for CVE-2021-3490",
          "url": "https://bugzilla.suse.com/1185796"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.ppc64le",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.s390x",
            "SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-0:2-3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-29T08:59:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-3490"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.