SUSE update for the Linux Kernel (Live Patch 22 for SLE 15)



Risk Low
Patch available YES
Number of vulnerabilities 3
CVE-ID CVE-2021-3573
CVE-2021-3640
CVE-2021-3715
CWE-ID CWE-416
Exploitation vector Local
Public exploit N/A
Vulnerable software
 SUSE Linux Enterprise Module for Live Patching
Operating systems & Components / Operating system

kernel-livepatch-4_12_14-150_66-default-debuginfo
Operating systems & Components / Operating system package or component

kernel-livepatch-4_12_14-150_66-default
Operating systems & Components / Operating system package or component

kernel-livepatch-4_12_14-150_63-default-debuginfo
Operating systems & Components / Operating system package or component

kernel-livepatch-4_12_14-150_63-default
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Use-after-free

EUVDB-ID: #VU63662

Risk: Low

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3573

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows local user to escalate their privileges on the system.

The vulnerability exists due to a use-after-free in hci_sock_bound_ioctl() function of the Linux kernel HCI subsystem triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user can use this flaw to crash the system or escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel (Live Patch 22 for SLE 15) to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Live Patching: 15-SP4

kernel-livepatch-4_12_14-150_66-default-debuginfo: before 11-2.2

kernel-livepatch-4_12_14-150_66-default: before 11-2.2

kernel-livepatch-4_12_14-150_63-default-debuginfo: before 13-2.2

kernel-livepatch-4_12_14-150_63-default: before 13-2.2

CPE2.3 External links

https://www.suse.com/support/update/announcement/2021/suse-su-20213440-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Use-after-free

EUVDB-ID: #VU63769

Risk: Low

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3640

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in sco_sock_sendmsg() function of the Linux kernel HCI subsystem. A privileged local user can call ioct UFFDIO_REGISTER or other way trigger race condition to escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel (Live Patch 22 for SLE 15) to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Live Patching: 15-SP4

kernel-livepatch-4_12_14-150_66-default-debuginfo: before 11-2.2

kernel-livepatch-4_12_14-150_66-default: before 11-2.2

kernel-livepatch-4_12_14-150_63-default-debuginfo: before 13-2.2

kernel-livepatch-4_12_14-150_63-default: before 13-2.2

CPE2.3 External links

https://www.suse.com/support/update/announcement/2021/suse-su-20213440-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Use-after-free

EUVDB-ID: #VU56393

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3715

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem (route4_change() function in net/sched/cls_route.c) in the way it handled changing of classification filters. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.


Mitigation

Update the affected package the Linux Kernel (Live Patch 22 for SLE 15) to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Live Patching: 15-SP4

kernel-livepatch-4_12_14-150_66-default-debuginfo: before 11-2.2

kernel-livepatch-4_12_14-150_66-default: before 11-2.2

kernel-livepatch-4_12_14-150_63-default-debuginfo: before 13-2.2

kernel-livepatch-4_12_14-150_63-default: before 13-2.2

CPE2.3 External links

https://www.suse.com/support/update/announcement/2021/suse-su-20213440-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###