Linux Kernel Multiple Vulnerabilities

Impact

• Denial of Service
• Elevation of Privilege
• Remote Code Execution
• Security Restriction Bypass
• Information Disclosure
• Data Manipulation

System / Technologies affected

• SUSE OpenStack Cloud Crowbar 9
• SUSE OpenStack Cloud 9
• SUSE Linux Enterprise Live Patching 12-SP4
• SUSE Linux Enterprise Server for SAP 12-SP4
• SUSE Linux Enterprise Server for SAP 15
• SUSE Linux Enterprise Server 12-SP4-LTSS
• SUSE Linux Enterprise Server 15-LTSS
• SUSE Linux Enterprise Module for Live Patching 15
• SUSE Linux Enterprise High Performance Computing 15-LTSS
• SUSE Linux Enterprise High Performance Computing 15-ESPOS
• SUSE Linux Enterprise High Availability 12-SP4
• SUSE Linux Enterprise High Availability 15

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

• To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch"
  https://www.suse.com/support/update/announcement/2021/suse-su-20213969-1/
  https://www.suse.com/support/update/announcement/2021/suse-su-20213972-1/

Vulnerability Identifier

• CVE-2018-3639
• CVE-2018-9517
• CVE-2018-13405
• CVE-2019-3874
• CVE-2019-3900
• CVE-2020-0429
• CVE-2020-3702
• CVE-2020-12770
• CVE-2021-0941
• CVE-2021-3542
• CVE-2021-3640
• CVE-2021-3653
• CVE-2021-3655
• CVE-2021-3656
• CVE-2021-3659
• CVE-2021-3679
• CVE-2021-3715
• CVE-2021-3732
• CVE-2021-3744
• CVE-2021-3752
• CVE-2021-3753
• CVE-2021-3759
• CVE-2021-3760
• CVE-2021-3764
• CVE-2021-3772
• CVE-2021-20320
• CVE-2021-20322
• CVE-2021-22543
• CVE-2021-31916
• CVE-2021-33033
• CVE-2021-34556
• CVE-2021-34981
• CVE-2021-35477
• CVE-2021-37159
• CVE-2021-37576
• CVE-2021-38160
• CVE-2021-38198
• CVE-2021-38204
• CVE-2021-40490
• CVE-2021-41864
• CVE-2021-42008
• CVE-2021-42252
• CVE-2021-42739

Source

• AusCERT
• SUSE

Related Link

• https://www.auscert.org.au/bulletins/ESB-2021.4156
• https://www.auscert.org.au/bulletins/ESB-2021.4163
• https://www.suse.com/support/update/announcement/2021/suse-su-20213969-1/
• https://www.suse.com/support/update/announcement/2021/suse-su-20213972-1/