SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0348-1)

high Nessus Plugin ID 146362
New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

The remote SUSE host is missing one or more security updates.

Description

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed :

CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).

CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).

CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required.
(bnc#1180812)

CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).

CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).

CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).

CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).

CVE-2020-36158: Fixed an issue wich might have allowed a remote attackers to execute arbitrary code via a long SSID value in mwifiex_cmd_802_11_ad_hoc_start() (bnc#1180559).

CVE-2020-28374: Fixed a vulnerability caused by insufficient identifier checking in the LIO SCSI target code. This could have been used by a remote attackers to read or write files via directory traversal in an XCOPY request (bnc#1178372).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE Linux Enterprise Server 12-SP5 :

zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-348=1

See Also

https://bugzilla.suse.com/show_bug.cgi?id=1046305

https://bugzilla.suse.com/show_bug.cgi?id=1046306

https://bugzilla.suse.com/show_bug.cgi?id=1046540

https://bugzilla.suse.com/show_bug.cgi?id=1046542

https://bugzilla.suse.com/show_bug.cgi?id=1046648

https://bugzilla.suse.com/show_bug.cgi?id=1050242

https://bugzilla.suse.com/show_bug.cgi?id=1050244

https://bugzilla.suse.com/show_bug.cgi?id=1050536

https://bugzilla.suse.com/show_bug.cgi?id=1050538

https://bugzilla.suse.com/show_bug.cgi?id=1050545

https://bugzilla.suse.com/show_bug.cgi?id=1056653

https://bugzilla.suse.com/show_bug.cgi?id=1056657

https://bugzilla.suse.com/show_bug.cgi?id=1056787

https://bugzilla.suse.com/show_bug.cgi?id=1064802

https://bugzilla.suse.com/show_bug.cgi?id=1066129

https://bugzilla.suse.com/show_bug.cgi?id=1073513

https://bugzilla.suse.com/show_bug.cgi?id=1074220

https://bugzilla.suse.com/show_bug.cgi?id=1075020

https://bugzilla.suse.com/show_bug.cgi?id=1086282

https://bugzilla.suse.com/show_bug.cgi?id=1086301

https://bugzilla.suse.com/show_bug.cgi?id=1086313

https://bugzilla.suse.com/show_bug.cgi?id=1086314

https://bugzilla.suse.com/show_bug.cgi?id=1098633

https://bugzilla.suse.com/show_bug.cgi?id=1103990

https://bugzilla.suse.com/show_bug.cgi?id=1103991

https://bugzilla.suse.com/show_bug.cgi?id=1103992

https://bugzilla.suse.com/show_bug.cgi?id=1104270

https://bugzilla.suse.com/show_bug.cgi?id=1104277

https://bugzilla.suse.com/show_bug.cgi?id=1104279

https://bugzilla.suse.com/show_bug.cgi?id=1104353

https://bugzilla.suse.com/show_bug.cgi?id=1104427

https://bugzilla.suse.com/show_bug.cgi?id=1104742

https://bugzilla.suse.com/show_bug.cgi?id=1104745

https://bugzilla.suse.com/show_bug.cgi?id=1109837

https://bugzilla.suse.com/show_bug.cgi?id=1111981

https://bugzilla.suse.com/show_bug.cgi?id=1112178

https://bugzilla.suse.com/show_bug.cgi?id=1112374

https://bugzilla.suse.com/show_bug.cgi?id=1113956

https://bugzilla.suse.com/show_bug.cgi?id=1119113

https://bugzilla.suse.com/show_bug.cgi?id=1126206

https://bugzilla.suse.com/show_bug.cgi?id=1126390

https://bugzilla.suse.com/show_bug.cgi?id=1127354

https://bugzilla.suse.com/show_bug.cgi?id=1127371

https://bugzilla.suse.com/show_bug.cgi?id=1129770

https://bugzilla.suse.com/show_bug.cgi?id=1136348

https://bugzilla.suse.com/show_bug.cgi?id=1144912

https://bugzilla.suse.com/show_bug.cgi?id=1149032

https://bugzilla.suse.com/show_bug.cgi?id=1163727

https://bugzilla.suse.com/show_bug.cgi?id=1172145

https://bugzilla.suse.com/show_bug.cgi?id=1174206

https://bugzilla.suse.com/show_bug.cgi?id=1176831

https://bugzilla.suse.com/show_bug.cgi?id=1176846

https://bugzilla.suse.com/show_bug.cgi?id=1178036

https://bugzilla.suse.com/show_bug.cgi?id=1178049

https://bugzilla.suse.com/show_bug.cgi?id=1178372

https://bugzilla.suse.com/show_bug.cgi?id=1178631

https://bugzilla.suse.com/show_bug.cgi?id=1178684

https://bugzilla.suse.com/show_bug.cgi?id=1178900

https://bugzilla.suse.com/show_bug.cgi?id=1179093

https://bugzilla.suse.com/show_bug.cgi?id=1179508

https://bugzilla.suse.com/show_bug.cgi?id=1179509

https://bugzilla.suse.com/show_bug.cgi?id=1179563

https://bugzilla.suse.com/show_bug.cgi?id=1179573

https://bugzilla.suse.com/show_bug.cgi?id=1179575

https://bugzilla.suse.com/show_bug.cgi?id=1179878

https://bugzilla.suse.com/show_bug.cgi?id=1180008

https://bugzilla.suse.com/show_bug.cgi?id=1180130

https://bugzilla.suse.com/show_bug.cgi?id=1180559

https://bugzilla.suse.com/show_bug.cgi?id=1180562

https://bugzilla.suse.com/show_bug.cgi?id=1180676

https://bugzilla.suse.com/show_bug.cgi?id=1180765

https://bugzilla.suse.com/show_bug.cgi?id=1180812

https://bugzilla.suse.com/show_bug.cgi?id=1180859

https://bugzilla.suse.com/show_bug.cgi?id=1180891

https://bugzilla.suse.com/show_bug.cgi?id=1180912

https://bugzilla.suse.com/show_bug.cgi?id=1181001

https://bugzilla.suse.com/show_bug.cgi?id=1181018

https://bugzilla.suse.com/show_bug.cgi?id=1181170

https://bugzilla.suse.com/show_bug.cgi?id=1181230

https://bugzilla.suse.com/show_bug.cgi?id=1181231

https://bugzilla.suse.com/show_bug.cgi?id=1181349

https://bugzilla.suse.com/show_bug.cgi?id=1181425

https://bugzilla.suse.com/show_bug.cgi?id=1181553

https://bugzilla.suse.com/show_bug.cgi?id=901327

https://www.suse.com/security/cve/CVE-2020-25639/

https://www.suse.com/security/cve/CVE-2020-27835/

https://www.suse.com/security/cve/CVE-2020-28374/

https://www.suse.com/security/cve/CVE-2020-29568/

https://www.suse.com/security/cve/CVE-2020-29569/

https://www.suse.com/security/cve/CVE-2020-36158/

https://www.suse.com/security/cve/CVE-2021-0342/

https://www.suse.com/security/cve/CVE-2021-20177/

https://www.suse.com/security/cve/CVE-2021-3347/

http://www.nessus.org/u?00638af0

Plugin Details

Severity: High

ID: 146362

File Name: suse_SU-2021-0348-1.nasl

Version: 1.2

Type: local

Agent: unix

Published: 2/10/2021

Updated: 2/12/2021

Dependencies: ssh_get_info.nasl

Risk Information

CVSS Score Source: CVE-2021-3347

VPR

Risk Factor: High

Score: 8.4

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: E:U/RL:OF/RC:C

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:kernel-azure, p-cpe:/a:novell:suse_linux:kernel-azure-base, p-cpe:/a:novell:suse_linux:kernel-azure-base-debuginfo, p-cpe:/a:novell:suse_linux:kernel-azure-debuginfo, p-cpe:/a:novell:suse_linux:kernel-azure-debugsource, p-cpe:/a:novell:suse_linux:kernel-azure-devel, p-cpe:/a:novell:suse_linux:kernel-syms-azure, cpe:/o:novell:suse_linux:12

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 2/9/2021

Vulnerability Publication Date: 12/15/2020

Reference Information

CVE: CVE-2020-25639, CVE-2020-27835, CVE-2020-28374, CVE-2020-29568, CVE-2020-29569, CVE-2020-36158, CVE-2021-0342, CVE-2021-20177, CVE-2021-3347