Linux Kernel Multiple Vulnerabilities

Impact

• Denial of Service
• Elevation of Privilege
• Remote Code Execution
• Security Restriction Bypass
• Information Disclosure

System / Technologies affected

• SUSE Linux Enterprise Live Patching 12-SP4
• SUSE Linux Enterprise Live Patching 12-SP5
• SUSE Linux Enterprise Module for Live Patching 15
• SUSE Linux Enterprise Module for Live Patching 15-SP1
• SUSE Linux Enterprise Module for Live Patching 15-SP2
• SUSE Linux Enterprise Server for SAP 12-SP3
• SUSE Linux Enterprise Server 12-SP3-LTSS

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Apply fixes issued by the vendor:

  https://www.suse.com/support/update/announcement/2021/suse-su-20211046-1/

  https://www.suse.com/support/update/announcement/2021/suse-su-20211074-1/

  https://www.suse.com/support/update/announcement/2021/suse-su-20211075-1/

Vulnerability Identifier

• CVE-2020-0429
• CVE-2020-1749
• CVE-2020-25645
• CVE-2020-29368
• CVE-2021-27363
• CVE-2021-27364
• CVE-2021-27365

Source

• SUSE
• AusCERT

Related Link

https://www.suse.com/support/update/announcement/2021/suse-su-20211046-1/

https://www.suse.com/support/update/announcement/2021/suse-su-20211074-1/

https://www.suse.com/support/update/announcement/2021/suse-su-20211075-1/

https://www.auscert.org.au/bulletins/ESB-2021.1184