SUSE SLES15 Security Update : the Linux RT Kernel (SUSE-SU-2021:3978-1)

high Nessus Plugin ID 155981

Language:

Synopsis

The remote SUSE host is missing one or more security updates.

Description

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3978-1 advisory.

- A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remove video card physically without power-off, but same happens if unbind the driver). (CVE-2020-27820)

- In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References:
Upstream kernel (CVE-2021-0941)

- An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi- device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability. (CVE-2021-31916)

- hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.
(CVE-2021-37159)

- An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c. (CVE-2021-43389)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://bugzilla.suse.com/1094840

https://bugzilla.suse.com/1133021

https://bugzilla.suse.com/1152489

https://bugzilla.suse.com/1153275

https://bugzilla.suse.com/1169263

https://bugzilla.suse.com/1169514

https://bugzilla.suse.com/1170269

https://bugzilla.suse.com/1176940

https://bugzilla.suse.com/1179599

https://bugzilla.suse.com/1188601

https://bugzilla.suse.com/1190523

https://bugzilla.suse.com/1190795

https://bugzilla.suse.com/1191790

https://bugzilla.suse.com/1191851

https://bugzilla.suse.com/1191958

https://bugzilla.suse.com/1191961

https://bugzilla.suse.com/1191980

https://bugzilla.suse.com/1192045

https://bugzilla.suse.com/1192229

https://bugzilla.suse.com/1192273

https://bugzilla.suse.com/1192328

https://bugzilla.suse.com/1192718

https://bugzilla.suse.com/1192740

https://bugzilla.suse.com/1192745

https://bugzilla.suse.com/1192750

https://bugzilla.suse.com/1192753

https://bugzilla.suse.com/1192781

https://bugzilla.suse.com/1192802

https://bugzilla.suse.com/1192896

https://bugzilla.suse.com/1192906

https://bugzilla.suse.com/1192918

https://bugzilla.suse.com/1192987

https://bugzilla.suse.com/1192998

https://bugzilla.suse.com/1193002

http://www.nessus.org/u?0bd097cc

https://www.suse.com/security/cve/CVE-2020-27820

https://www.suse.com/security/cve/CVE-2021-0941

https://www.suse.com/security/cve/CVE-2021-20322

https://www.suse.com/security/cve/CVE-2021-31916

https://www.suse.com/security/cve/CVE-2021-34981

https://www.suse.com/security/cve/CVE-2021-37159

https://www.suse.com/security/cve/CVE-2021-43389

Plugin Details

Severity: High

ID: 155981

File Name: suse_SU-2021-3978-1.nasl

Version: 1.3

Type: local

Agent: unix

Published: 12/10/2021

Updated: 5/10/2022

Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: E:U/RL:OF/RC:C

CVSS Score Source: CVE-2021-0941

CVSS v3

Risk Factor: High

Base Score: 7.4

Temporal Score: 6.4

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Temporal Vector: E:U/RL:O/RC:C

CVSS Score Source: CVE-2021-20322

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:cluster-md-kmp-rt, p-cpe:/a:novell:suse_linux:dlm-kmp-rt, p-cpe:/a:novell:suse_linux:gfs2-kmp-rt, p-cpe:/a:novell:suse_linux:kernel-devel-rt, p-cpe:/a:novell:suse_linux:kernel-rt, p-cpe:/a:novell:suse_linux:kernel-rt-devel, p-cpe:/a:novell:suse_linux:kernel-rt_debug, p-cpe:/a:novell:suse_linux:kernel-rt_debug-devel, p-cpe:/a:novell:suse_linux:kernel-source-rt, p-cpe:/a:novell:suse_linux:kernel-syms-rt, p-cpe:/a:novell:suse_linux:ocfs2-kmp-rt, cpe:/o:novell:suse_linux:15

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 12/9/2021

Vulnerability Publication Date: 5/6/2021

Reference Information

CVE: CVE-2020-27820, CVE-2021-0941, CVE-2021-20322, CVE-2021-31916, CVE-2021-34981, CVE-2021-37159, CVE-2021-43389

SuSE: SUSE-SU-2021:3978-1