gpp_maybe
Security update for the linux kernel
slessp4-kernel-source-14764
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-0512: Fixed a possible out of bounds write due to a heap buffer overflow in __hidinput_change_resolution_multipliers. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. (bsc#1187595) - CVE-2021-34693: Fixed a bug in net/can/bcm.c which could allow local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. (bsc#1187452) - CVE-2020-36386: Fixed an out-of-bounds read in hci_extended_inquiry_result_evt. (bsc#1187038) - CVE-2020-24588: Fixed a bug that could allow an adversary to abuse devices that support receiving non-SSP A-MSDU frames to inject arbitrary network packets. (bsc#1185861 bsc#1185863) - CVE-2021-29154: Fixed an incorrect computation of branch displacements in the BPF JIT compilers, which could allow to execute arbitrary code within the kernel context. (bsc#1184391) - CVE-2021-32399: Fixed a race condition in net/bluetooth/hci_request.c for removal of the HCI controller. (bsc#1184611) - CVE-2020-24586: Fixed a bug that, under the right circumstances, allows to inject arbitrary network packets and/or exfiltrate user data when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP. (bsc#1185859 bsc#1185863) - CVE-2020-26139: Fixed a bug that allows an Access Point (AP) to forward EAPOL frames to other clients even though the sender has not yet successfully authenticated. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and made it easier to exploit other vulnerabilities in connected clients. (bsc#1185863 bsc#1186062) - CVE-2020-24587: Fixed a bug that allows an adversary to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed. (bsc#1185862 bsc#1185863) The following non-security bugs were fixed: - md: do not flush workqueue unconditionally in md_open (bsc#1184081). - md: factor out a mddev_find_locked helper from mddev_find (bsc#1184081). - md: md_open returns -EBUSY when entering racing area (bsc#1184081). - md: split mddev_find (bsc#1184081).
-
Release DateJul 13 2021
-
ReferencesBugzilla: 1184081, 1184391, 1184611, 1185859, 1185861, 1185862, 1185863, 1186062, 1187038, 1187452, 1187595
CVEs: CVE-2021-0512, CVE-2021-34693, CVE-2020-36386, CVE-2020-24588, CVE-2021-29154, CVE-2021-32399, CVE-2020-24586, CVE-2020-26139, CVE-2020-24587 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server 11.4 i686
-
Packageskernel-default
The Standard Kernelkernel-default-base3.0.101-108.129.1 lock rpm lock nosrc
The Standard Kernel - base moduleskernel-default-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel moduleskernel-ec23.0.101-108.129.1 lock rpm
The Amazon EC2 Xen Kernelkernel-ec2-base3.0.101-108.129.1 lock rpm lock nosrc
The Amazon EC2 Xen Kernel - base moduleskernel-ec2-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel moduleskernel-pae3.0.101-108.129.1 lock rpm
Kernel with PAE Supportkernel-pae-base3.0.101-108.129.1 lock rpm lock nosrc
Kernel with PAE Support - base moduleskernel-pae-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel moduleskernel-source3.0.101-108.129.1 lock rpm
The Linux Kernel Sourceskernel-syms3.0.101-108.129.1 lock rpm lock src
Kernel Symbol Versions (modversions)kernel-trace3.0.101-108.129.1 lock rpm lock src
The Tracing Kernelkernel-trace-base3.0.101-108.129.1 lock rpm lock nosrc
The Tracing Kernel - base moduleskernel-trace-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel moduleskernel-xen3.0.101-108.129.1 lock rpm
The Xen Kernelkernel-xen-base3.0.101-108.129.1 lock rpm lock nosrc
The Xen Kernel - base moduleskernel-xen-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel modules3.0.101-108.129.1 lock rpm
SUSE Linux Enterprise Server 11.4 s390x
-
Packageskernel-default
The Standard Kernelkernel-default-base3.0.101-108.129.1 lock rpm lock nosrc
The Standard Kernel - base moduleskernel-default-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel moduleskernel-default-man3.0.101-108.129.1 lock rpm
The collection of man pages generated by the kmsg script.kernel-source3.0.101-108.129.1 lock rpm
The Linux Kernel Sourceskernel-syms3.0.101-108.129.1 lock rpm lock src
Kernel Symbol Versions (modversions)kernel-trace3.0.101-108.129.1 lock rpm lock src
The Tracing Kernelkernel-trace-base3.0.101-108.129.1 lock rpm lock nosrc
The Tracing Kernel - base moduleskernel-trace-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel modules3.0.101-108.129.1 lock rpm
SUSE Linux Enterprise Server 11.4 ppc64
-
Packageskernel-bigmem
Kernel for SAP HANA on ppc64kernel-bigmem-base3.0.101-108.129.1 lock rpm lock nosrc
Kernel for SAP HANA on ppc64 - base moduleskernel-bigmem-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel moduleskernel-default3.0.101-108.129.1 lock rpm
The Standard Kernelkernel-default-base3.0.101-108.129.1 lock rpm lock nosrc
The Standard Kernel - base moduleskernel-default-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel moduleskernel-ppc643.0.101-108.129.1 lock rpm
Kernel for ppc64 Systemskernel-ppc64-base3.0.101-108.129.1 lock rpm lock nosrc
Kernel for ppc64 Systems - base moduleskernel-ppc64-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel moduleskernel-source3.0.101-108.129.1 lock rpm
The Linux Kernel Sourceskernel-syms3.0.101-108.129.1 lock rpm lock src
Kernel Symbol Versions (modversions)kernel-trace3.0.101-108.129.1 lock rpm lock src
The Tracing Kernelkernel-trace-base3.0.101-108.129.1 lock rpm lock nosrc
The Tracing Kernel - base moduleskernel-trace-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel modules3.0.101-108.129.1 lock rpm
SUSE Linux Enterprise Server 11.4 x86_64
-
Packageskernel-default
The Standard Kernelkernel-default-base3.0.101-108.129.1 lock rpm lock nosrc
The Standard Kernel - base moduleskernel-default-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel moduleskernel-ec23.0.101-108.129.1 lock rpm
The Amazon EC2 Xen Kernelkernel-ec2-base3.0.101-108.129.1 lock rpm lock nosrc
The Amazon EC2 Xen Kernel - base moduleskernel-ec2-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel moduleskernel-source3.0.101-108.129.1 lock rpm
The Linux Kernel Sourceskernel-syms3.0.101-108.129.1 lock rpm lock src
Kernel Symbol Versions (modversions)kernel-trace3.0.101-108.129.1 lock rpm lock src
The Tracing Kernelkernel-trace-base3.0.101-108.129.1 lock rpm lock nosrc
The Tracing Kernel - base moduleskernel-trace-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel moduleskernel-xen3.0.101-108.129.1 lock rpm
The Xen Kernelkernel-xen-base3.0.101-108.129.1 lock rpm lock nosrc
The Xen Kernel - base moduleskernel-xen-devel3.0.101-108.129.1 lock rpm
Development files necessary for building kernel modules3.0.101-108.129.1 lock rpm