SUSE update for the Linux Kernel (Live Patch 33 for SLE 15 SP1)

1) Use of a broken or risky cryptographic algorithm

EUVDB-ID: #VU66811

Risk: Medium

CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2020-36516

CWE-ID: CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) or MitM attacks.

The vulnerability exists due to an error in the mixed IPID assignment method with the hash-based IPID assignment policy in Linux kernel. A remote attacker can inject data into a victim's TCP session or terminate that session.

Mitigation

Update the affected package the Linux Kernel (Live Patch 33 for SLE 15 SP1) to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Module for Live Patching: 15-SP1 - 15-SP4

SUSE Linux Enterprise Server for SAP Applications: 15-SP1 - 15

SUSE Linux Enterprise High Performance Computing: 15-SP1 - 15

SUSE Linux Enterprise Server: 15-SP1 - 15-SP2

SUSE Linux Enterprise Live Patching: 12-SP5

kgraft-patch-4_12_14-122_130-default: before 2-2.2

kernel-livepatch-4_12_14-150000_150_98-default-debuginfo: before 2-150000.2.1

kernel-livepatch-4_12_14-150000_150_98-default: before 2-150000.2.1

kernel-livepatch-4_12_14-150100_197_120-default: before 2-150100.2.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_module_for_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:15-SP1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:15:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15-SP1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:15:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP1:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP2:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kgraft-patch-4_12_14-122_130-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-4_12_14-150000_150_98-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-4_12_14-150000_150_98-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-4_12_14-150100_197_120-default:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20223064-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.