SUSE update for the Linux Kernel (Live Patch 6 for SLE 15 SP3)

1) Use of insufficiently random values

EUVDB-ID: #VU63839

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-20322

CWE-ID: CWE-330 - Use of Insufficiently Random Values

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to an error when processing received ICMP errors. A remote attacker can effectively bypass the source port UDP randomization to gain access to sensitive information.

Mitigation

Update the affected package the Linux Kernel (Live Patch 6 for SLE 15 SP3) to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Live Patching: 15-SP2 - 15-SP3

kernel-livepatch-SLE15-SP2_Update_21-debugsource: before 2-2.1

kernel-livepatch-SLE15-SP2_Update_20-debugsource: before 3-2.1

kernel-livepatch-SLE15-SP2_Update_19-debugsource: before 3-2.1

kernel-livepatch-SLE15-SP2_Update_18-debugsource: before 5-2.1

kernel-livepatch-SLE15-SP2_Update_17-debugsource: before 6-2.1

kernel-livepatch-SLE15-SP2_Update_16-debugsource: before 7-2.1

kernel-livepatch-SLE15-SP2_Update_14-debugsource: before 7-2.1

kernel-livepatch-SLE15-SP2_Update_13-debugsource: before 9-2.1

kernel-livepatch-SLE15-SP2_Update_12-debugsource: before 9-2.1

kernel-livepatch-5_3_18-24_93-default-debuginfo: before 2-2.1

kernel-livepatch-5_3_18-24_93-default: before 2-2.1

kernel-livepatch-5_3_18-24_86-default-debuginfo: before 3-2.1

kernel-livepatch-5_3_18-24_86-default: before 3-2.1

kernel-livepatch-5_3_18-24_83-default-debuginfo: before 3-2.1

kernel-livepatch-5_3_18-24_83-default: before 3-2.1

kernel-livepatch-5_3_18-24_78-default-debuginfo: before 5-2.1

kernel-livepatch-5_3_18-24_78-default: before 5-2.1

kernel-livepatch-5_3_18-24_75-default-debuginfo: before 6-2.1

kernel-livepatch-5_3_18-24_75-default: before 6-2.1

kernel-livepatch-5_3_18-24_70-default-debuginfo: before 7-2.1

kernel-livepatch-5_3_18-24_70-default: before 7-2.1

kernel-livepatch-5_3_18-24_67-default-debuginfo: before 7-2.1

kernel-livepatch-5_3_18-24_67-default: before 7-2.1

kernel-livepatch-5_3_18-24_64-default-debuginfo: before 9-2.1

kernel-livepatch-5_3_18-24_64-default: before 9-2.1

kernel-livepatch-5_3_18-24_61-default-debuginfo: before 9-2.1

kernel-livepatch-5_3_18-24_61-default: before 9-2.1

kernel-livepatch-SLE15-SP3_Update_9-debugsource: before 2-2.1

kernel-livepatch-SLE15-SP3_Update_7-debugsource: before 3-2.1

kernel-livepatch-SLE15-SP3_Update_6-debugsource: before 3-2.1

kernel-livepatch-SLE15-SP3_Update_5-debugsource: before 5-2.1

kernel-livepatch-SLE15-SP3_Update_4-debugsource: before 6-2.1

kernel-livepatch-SLE15-SP3_Update_3-debugsource: before 7-2.1

kernel-livepatch-SLE15-SP3_Update_2-debugsource: before 7-2.1

kernel-livepatch-SLE15-SP3_Update_1-debugsource: before 7-2.1

kernel-livepatch-5_3_18-59_5-default-debuginfo: before 7-2.1

kernel-livepatch-5_3_18-59_5-default: before 7-2.1

kernel-livepatch-5_3_18-59_34-default-debuginfo: before 2-2.1

kernel-livepatch-5_3_18-59_34-default: before 2-2.1

kernel-livepatch-5_3_18-59_27-default-debuginfo: before 3-2.1

kernel-livepatch-5_3_18-59_27-default: before 3-2.1

kernel-livepatch-5_3_18-59_24-default-debuginfo: before 3-2.1

kernel-livepatch-5_3_18-59_24-default: before 3-2.1

kernel-livepatch-5_3_18-59_19-default-debuginfo: before 5-2.1

kernel-livepatch-5_3_18-59_19-default: before 5-2.1

kernel-livepatch-5_3_18-59_16-default-debuginfo: before 6-2.1

kernel-livepatch-5_3_18-59_16-default: before 6-2.1

kernel-livepatch-5_3_18-59_13-default-debuginfo: before 7-2.1

kernel-livepatch-5_3_18-59_13-default: before 7-2.1

kernel-livepatch-5_3_18-59_10-default-debuginfo: before 7-2.1

kernel-livepatch-5_3_18-59_10-default: before 7-2.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP2:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp2_update_21-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp2_update_20-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp2_update_19-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp2_update_18-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp2_update_17-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp2_update_16-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp2_update_14-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp2_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp2_update_12-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_93-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_93-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_86-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_86-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_83-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_83-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_78-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_78-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_75-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_75-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_70-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_70-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_67-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_67-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_64-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_64-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_61-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-24_61-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp3_update_9-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp3_update_7-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp3_update_6-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp3_update_5-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp3_update_4-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp3_update_3-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp3_update_2-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp3_update_1-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_5-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_5-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_34-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_34-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_27-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_27-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_24-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_24-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_19-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_19-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_16-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_16-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_13-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_13-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_10-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_3_18-59_10-default:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2021/suse-su-20214075-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.