SUSE-SU-2021:2409-1: important: Security update for the Linux Kernel

sle-updates at sle-updates at
Tue Jul 20 16:32:44 UTC 2021

   SUSE Security Update: Security update for the Linux Kernel

Announcement ID:    SUSE-SU-2021:2409-1
Rating:             important
References:         #1152489 #1182470 #1185486 #1187927 #1187972 
                    #1187980 #1188062 #1188116 
Cross-References:   CVE-2021-22555 CVE-2021-33909
CVSS scores:
                    CVE-2021-22555 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
                    CVE-2021-22555 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
                    CVE-2021-33909 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:
                    SUSE Linux Enterprise Module for Public Cloud 15-SP3

   An update that solves two vulnerabilities and has 6 fixes
   is now available.


   The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive
   various security and bugfixes.

   The following security bugs were fixed:

   - CVE-2021-22555: A heap out-of-bounds write affecting Linux since
     v2.6.19-rc1 was discovered in net/netfilter/x_tables.c (bnc#1188116 ).
   - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer
     that allows to obtain full root privileges (bsc#1188062).

   The following non-security bugs were fixed:

   - ceph: must hold snap_rwsem when filling inode for async create
   - cgroup1: do not allow '\n' in renaming (bsc#1187972).
   - qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
   - scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
   - usb: dwc3: Fix debugfs creation flow (git-fixes).
   - x86/pkru: Write hardware init value to PKRU when xstate is init
   - x86/process: Check PF_KTHREAD and not current->mm for kernel threads

Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Module for Public Cloud 15-SP3:

      zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2021-2409=1

Package List:

   - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (x86_64):


   - SUSE Linux Enterprise Module for Public Cloud 15-SP3 (noarch):



More information about the sle-updates mailing list