openEuler 20.03 LTS SP1 update for kernel



Risk Low
Patch available YES
Number of vulnerabilities 33
CVE-ID CVE-2020-27170
CVE-2020-27171
CVE-2021-28660
CVE-2021-28964
CVE-2021-28972
CVE-2021-28971
CVE-2020-35519
CVE-2021-20292
CVE-2021-3444
CVE-2021-29265
CVE-2021-29264
CVE-2021-29647
CVE-2021-29650
CVE-2021-28688
CVE-2021-29154
CVE-2020-36312
CVE-2020-36311
CVE-2020-36322
CVE-2021-29155
CVE-2021-23133
CVE-2021-3506
CVE-2021-30002
CVE-2021-3483
CVE-2021-31916
CVE-2021-31829
CVE-2021-32399
CVE-2021-23134
CVE-2021-33034
CVE-2021-33033
CVE-2021-33200
CVE-2021-3564
CVE-2020-36386
CVE-2021-28950
CWE-ID CWE-203
CWE-193
CWE-787
CWE-362
CWE-119
CWE-400
CWE-125
CWE-416
CWE-20
CWE-200
CWE-665
CWE-77
CWE-401
CWE-264
CWE-404
CWE-415
CWE-834
Exploitation vector Local
Public exploit Public exploit code for vulnerability #19 is available.
Vulnerable software
 openEuler
Operating systems & Components / Operating system

kernel-debuginfo
Operating systems & Components / Operating system package or component

python3-perf-debuginfo
Operating systems & Components / Operating system package or component

kernel-tools-debuginfo
Operating systems & Components / Operating system package or component

python3-perf
Operating systems & Components / Operating system package or component

python2-perf
Operating systems & Components / Operating system package or component

kernel-debugsource
Operating systems & Components / Operating system package or component

python2-perf-debuginfo
Operating systems & Components / Operating system package or component

bpftool
Operating systems & Components / Operating system package or component

perf-debuginfo
Operating systems & Components / Operating system package or component

kernel-tools-devel
Operating systems & Components / Operating system package or component

kernel-tools
Operating systems & Components / Operating system package or component

kernel-devel
Operating systems & Components / Operating system package or component

bpftool-debuginfo
Operating systems & Components / Operating system package or component

kernel-source
Operating systems & Components / Operating system package or component

perf
Operating systems & Components / Operating system package or component

kernel
Operating systems & Components / Operating system package or component

Vendor openEuler

Security Bulletin

This security bulletin contains information about 33 vulnerabilities.

1) Observable discrepancy

EUVDB-ID: #VU51774

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-27170

CWE-ID: CWE-203 - Observable discrepancy

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists in kernel/bpf/verifier.c due to kernel performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations. A local user can run a specially crafted program to gain access to sensitive information.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Off-by-one

EUVDB-ID: #VU51775

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-27171

CWE-ID: CWE-193 - Off-by-one Error

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to an off-by-one error in kernel/bpf/verifier.c affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations. A local user can run a specially crafted program to gain access to sensitive information on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Out-of-bounds write

EUVDB-ID: #VU56817

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-28660

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in the "rtw_wx_set_scan" in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c. A local user can trigger out-of-bounds write and execute arbitrary code on the target system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Race condition

EUVDB-ID: #VU63573

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-28964

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service attack.

The vulnerability exists due to a race condition in the get_old_root() function in fs/btrfs/ctree.c component in the Linux kernel. A local user can exploit the race and perform a denial of service attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Buffer overflow

EUVDB-ID: #VU56819

Risk: Low

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-28972

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the drivers/pci/hotplug/rpadlpar_sysfs.c. A local administrator can trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Resource exhaustion

EUVDB-ID: #VU64830

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-28971

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to mishandling of PEBS status in a PEBS record In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Out-of-bounds read

EUVDB-ID: #VU51552

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-35519

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the x25_bind() function in net/x25/af_x25.c in the Linux kernel. A local user can run a specially crafted program to read contents of memory on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Use-after-free

EUVDB-ID: #VU63382

Risk: Low

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-20292

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges.

The vulnerability exists due to a use-after-free error in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. A local user can escalate privileges and execute code in the context of the kernel.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Out-of-bounds read

EUVDB-ID: #VU90368

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3444

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to an out-of-bounds read error within the fixup_bpf_calls() function in kernel/bpf/verifier.c. A local user can execute arbitrary code.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Race condition

EUVDB-ID: #VU91488

Risk: Low

CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-29265

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a race condition within the usbip_sockfd_store() function in drivers/usb/usbip/stub_dev.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Input validation error

EUVDB-ID: #VU93697

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-29264

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the gfar_add_rx_frag() and gfar_clean_rx_ring() functions in drivers/net/ethernet/freescale/gianfar.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Information disclosure

EUVDB-ID: #VU57040

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-29647

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to an error in qrtr_recvmsg(0 function in net/qrtr/qrtr.c caused by a partially uninitialized data structure. A local user can read sensitive information from kernel memory.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Buffer overflow

EUVDB-ID: #VU56240

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-29650

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the netfilter subsystem in net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h. A local user can trigger memory corruption upon the assignment of a new table value and cause denial of service.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Improper Initialization

EUVDB-ID: #VU63658

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-28688

CWE-ID: CWE-665 - Improper Initialization

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service attack.

The vulnerability exists due to improper initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. A local user can perform a denial of service attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Command Injection

EUVDB-ID: #VU56241

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-29154

CWE-ID: CWE-77 - Command injection

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect computation of branch displacements within the BPF JIT compilers in the Linux kernel in arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c. A local user can inject and execute arbitrary commands with elevated privileges.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Memory leak

EUVDB-ID: #VU67183

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-36312

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform DoS attack on the target system.

The vulnerability exists in the KVM hypervisor of the Linux kernel. A local user can force the application to leak memory and perform denial of service attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU55262

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-36311

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service attack.

The vulnerability exists due to an error in arch/x86/kvm/svm/sev.c in Linux kernel, which allows soft lockup by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions).

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Improper Resource Shutdown or Release

EUVDB-ID: #VU59473

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-36322

CWE-ID: CWE-404 - Improper Resource Shutdown or Release

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists in the FUSE filesystem implementation in the Linux kernel due to fuse_do_getattr() calls make_bad_inode() in inappropriate situations. A local user can run a specially crafted program to trigger kernel crash.

Note, the vulnerability exists due to incomplete fix for #VU58207 (CVE-2021-28950).

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Out-of-bounds read

EUVDB-ID: #VU67490

Risk: Low

CVSSv4.0: 5.2 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2021-29155

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: Yes

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists in retrieve_ptr_limit in kernel/bpf/verifier.c in the Linux kernel mechanism. A local, special user privileged (CAP_SYS_ADMIN) BPF program running on affected systems may bypass the protection, and execute speculatively out-of-bounds loads from the kernel memory.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

20) Race condition

EUVDB-ID: #VU53006

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-23133

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in Linux kernel SCTP sockets (net/sctp/socket.c). If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by a local user with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) Out-of-bounds read

EUVDB-ID: #VU53007

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3506

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in fs/f2fs/node.c in the f2fs module in the Linux kernel. A local user can trigger out-of-bounds read error and read internal kernel information or crash the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Memory leak

EUVDB-ID: #VU68552

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-30002

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform DoS attack on the target system.

The vulnerability exists due memory leak within the webcam support driver in video_usercopy() function in drivers/media/v4l2-core/v4l2-ioctl.c in Linux kernel. A local user can trigger leak memory and perform denial of service attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Use-after-free

EUVDB-ID: #VU63659

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3483

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in the Nosy driver in the Linux kernel. A local user can trigger use-after-free and to escalate privileges on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

24) Out-of-bounds write

EUVDB-ID: #VU63574

Risk: Low

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-31916

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module. A special user (CAP_SYS_ADMIN) can trigger a buffer overflow in the ioctl for listing devices and escalate privileges on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

25) Information disclosure

EUVDB-ID: #VU67181

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-31829

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output in the Linux kernel's eBPF verification code. A local user can insert eBPF instructions, use the eBPF verifier to abuse a spectre-like flaw and infer all system memory.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

26) Race condition

EUVDB-ID: #VU55257

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-32399

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition  for removal of the HCI controller within net/bluetooth/hci_request.c in the Linux kernel. A local user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

27) Use-after-free

EUVDB-ID: #VU63657

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-23134

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in nfc sockets in the Linux Kernel. A local user with the CAP_NET_RAW capability can trigger use-after-free and escalate privileges on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

28) Use-after-free

EUVDB-ID: #VU54454

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-33034

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in net/bluetooth/hci_event.c when destroying an hci_chan. A local user can escalate privileges on the system.


Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

29) Use-after-free

EUVDB-ID: #VU55261

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-33033

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper handling of the CIPSO and CALIPSO refcounting for the DOI definitions in cipso_v4_genopt(0 function in net/ipv4/cipso_ipv4.c in Linux kernel. A local user can trigger a use-after-free error and execute arbitrary code with escalated privileges.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

30) Out-of-bounds write

EUVDB-ID: #VU87989

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-33200

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in kernel/bpf/verifier.c. A local user can trigger an out-of-bounds write and escalate privileges on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

31) Double Free

EUVDB-ID: #VU63660

Risk: Low

CVSSv4.0: 1.7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3564

CWE-ID: CWE-415 - Double Free

Exploit availability: No

Description

The vulnerability allows a local attacker to perform a denial of service attack.

The vulnerability exists due to bluetooth subsystem in the Linux kernel does not properly handle HCI device detach events. An attacker with physical access to the system can trigger double free error and perform a denial of service attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

32) Out-of-bounds read

EUVDB-ID: #VU59125

Risk: Low

CVSSv4.0: 4.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-36386

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a boundary condition within the hci_extended_inquiry_result_evt() function in Linux kernel. A local user can tun a specially crafted program to trigger an out-of-bounds read error and read contents of memory on the system or crash the kernel.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

33) Excessive Iteration

EUVDB-ID: #VU58207

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-28950

CWE-ID: CWE-834 - Excessive Iteration

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to excessive iteration in fs/fuse/fuse_i.h in the Linux kernel. A local user can run a specially crafted program to perform a denial of service attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1

kernel-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-debuginfo: before 4.19.90-2106.3.0.0095

python3-perf: before 4.19.90-2106.3.0.0095

python2-perf: before 4.19.90-2106.3.0.0095

kernel-debugsource: before 4.19.90-2106.3.0.0095

python2-perf-debuginfo: before 4.19.90-2106.3.0.0095

bpftool: before 4.19.90-2106.3.0.0095

perf-debuginfo: before 4.19.90-2106.3.0.0095

kernel-tools-devel: before 4.19.90-2106.3.0.0095

kernel-tools: before 4.19.90-2106.3.0.0095

kernel-devel: before 4.19.90-2106.3.0.0095

bpftool-debuginfo: before 4.19.90-2106.3.0.0095

kernel-source: before 4.19.90-2106.3.0.0095

perf: before 4.19.90-2106.3.0.0095

kernel: before 4.19.90-2106.3.0.0095

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1176


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###