Linux Kernel Multiple Vulnerabilities

Impact

• Denial of Service
• Elevation of Privilege
• Remote Code Execution
• Security Restriction Bypass
• Information Disclosure
• Data Manipulation

System / Technologies affected

• SUSE Linux Enterprise Workstation Extension 15-SP3
• SUSE Linux Enterprise Module for Live Patching 15-SP3
• SUSE Linux Enterprise Module for Legacy Software 15-SP3
• SUSE Linux Enterprise Module for Development Tools 15-SP3
• SUSE Linux Enterprise Module for Basesystem 15-SP3
• SUSE Linux Enterprise High Availability 15-SP3
• SUSE Linux Enterprise Module for Public Cloud 15-SP3

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Apply fixes issued by the vendor:

  https://www.suse.com/support/update/announcement/2021/suse-su-20211975-1/

  https://www.suse.com/support/update/announcement/2021/suse-su-20211977-1/

Vulnerability Identifier

• CVE-2019-18814
• CVE-2019-19769
• CVE-2020-24586
• CVE-2020-24587
• CVE-2020-24588
• CVE-2020-25670
• CVE-2020-25671
• CVE-2020-25672
• CVE-2020-25673
• CVE-2020-26139
• CVE-2020-26141
• CVE-2020-26145
• CVE-2020-26147
• CVE-2020-27170
• CVE-2020-27171
• CVE-2020-27673
• CVE-2020-27815
• CVE-2020-35519
• CVE-2020-36310
• CVE-2020-36311
• CVE-2020-36312
• CVE-2020-36322
• CVE-2021-3428
• CVE-2021-3444
• CVE-2021-3483
• CVE-2021-3489
• CVE-2021-3490
• CVE-2021-3491
• CVE-2021-20268
• CVE-2021-23134
• CVE-2021-27363
• CVE-2021-27364
• CVE-2021-27365
• CVE-2021-28038
• CVE-2021-28375
• CVE-2021-28660
• CVE-2021-28688
• CVE-2021-28950
• CVE-2021-28952
• CVE-2021-28964
• CVE-2021-28971
• CVE-2021-28972
• CVE-2021-29154
• CVE-2021-29155
• CVE-2021-29264
• CVE-2021-29265
• CVE-2021-29647
• CVE-2021-29650
• CVE-2021-30002
• CVE-2021-32399
• CVE-2021-33034
• CVE-2021-33200

Source

• SUSE
• AusCERT

Related Link

• https://www.suse.com/support/update/announcement/2021/suse-su-20211975-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20211977-1/
• http://www.auscert.org.au/bulletins/ESB-2021.2136