Security update for the Linux Kernel

SUSE Security Update: Security update for the Linux Kernel
Announcement ID: SUSE-SU-2021:2427-1
Rating: important
References: #1153720 #1174978 #1179610 #1181193 #1185428 #1185701 #1185861 #1186463 #1186484 #1187038 #1187050 #1187215 #1187452 #1187554 #1187595 #1187601 #1188062 #1188116
Cross-References:CVE-2020-24588 CVE-2020-26558 CVE-2020-36385 CVE-2020-36386 CVE-2021-0129 CVE-2021-0512 CVE-2021-0605 CVE-2021-22555 CVE-2021-33200 CVE-2021-33624 CVE-2021-33909 CVE-2021-34693 CVE-2021-3609
Affected Products:
  • SUSE Manager Server 4.0
  • SUSE Manager Retail Branch Server 4.0
  • SUSE Manager Proxy 4.0
  • SUSE Linux Enterprise Server for SAP 15-SP1
  • SUSE Linux Enterprise Server 15-SP1-LTSS
  • SUSE Linux Enterprise Server 15-SP1-BCL
  • SUSE Linux Enterprise Module for Live Patching 15-SP1
  • SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS
  • SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS
  • SUSE Linux Enterprise High Availability 15-SP1
  • SUSE Enterprise Storage 6
  • SUSE CaaS Platform 4.0

An update that solves 13 vulnerabilities and has 5 fixes is now available.

Description:

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:

  • CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
  • CVE-2021-33624: Fixed a bug which allows unprivileged BPF program to leak the contents of arbitrary kernel memory (and therefore, of all physical memory) via a side-channel. (bsc#1187554)
  • CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (bsc#1187601)
  • CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187595)
  • CVE-2020-26558: Fixed a flaw in the Bluetooth LE and BR/EDR secure pairing that could permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing. (bnc#1179610)
  • CVE-2021-34693: Fixed a bug in net/can/bcm.c which could allow local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. (bsc#1187452)
  • CVE-2021-0129: Fixed an improper access control in BlueZ that may have allowed an authenticated user to potentially enable information disclosure via adjacent access. (bnc#1186463)
  • CVE-2020-36386: Fixed an out-of-bounds read in hci_extended_inquiry_result_evt. (bsc#1187038)
  • CVE-2020-24588: Fixed a bug that could allow an adversary to abuse devices that support receiving non-SSP A-MSDU frames to inject arbitrary network packets. (bsc#1185861 bsc#1185863)
  • CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
  • CVE-2021-3609: Fixed a race condition in the CAN BCM networking protocol which allows for local privilege escalation. (bsc#1187215)
  • CVE-2020-36385: Fixed a use-after-free flaw in ucma.c which allows for local privilege escalation. (bsc#1187050)
  • CVE-2021-33200: Fix leakage of uninitialized bpf stack under speculation. (bsc#1186484)

The following non-security bugs were fixed:
  • af_packet: fix the tx skb protocol in raw sockets with ETH_P_ALL (bsc#1176081).
  • kabi: preserve struct header_ops after bsc#1176081 fix (bsc#1176081).
  • net: Do not set transport offset to invalid value (bsc#1176081).
  • net: Introduce parse_protocol header_ops callback (bsc#1176081).
  • net/ethernet: Add parse_protocol header_ops support (bsc#1176081).
  • net/mlx5e: Remove the wrong assumption about transport offset (bsc#1176081).
  • net/mlx5e: Trust kernel regarding transport offset (bsc#1176081).
  • net/packet: Ask driver for protocol if not provided by user (bsc#1176081).
  • net/packet: Remove redundant skb->protocol set (bsc#1176081).
  • resource: Fix find_next_iomem_res() iteration issue (bsc#1181193).
  • scsi: scsi_dh_alua: Retry RTPG on a different path after failure (bsc#1174978 bsc#1185701).
  • SUNRPC in case of backlog, hand free slots directly to waiting task (bsc#1185428).
  • SUNRPC: More fixes for backlog congestion (bsc#1185428).
  • x86/crash: Add e820 reserved ranges to kdump kernel's e820 table (bsc#1181193).
  • x86/debug: Extend the lower bound of crash kernel low reservations (bsc#1153720).
  • x86/e820, ioport: Add a new I/O resource descriptor IORES_DESC_RESERVED (bsc#1181193).
  • x86/mm: Rework ioremap resource mapping determination (bsc#1181193).

Special Instructions and Notes:

Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Manager Server 4.0:
    zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-2427=1
  • SUSE Manager Retail Branch Server 4.0:
    zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-2427=1
  • SUSE Manager Proxy 4.0:
    zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-2427=1
  • SUSE Linux Enterprise Server for SAP 15-SP1:
    zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2021-2427=1
  • SUSE Linux Enterprise Server 15-SP1-LTSS:
    zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-2427=1
  • SUSE Linux Enterprise Server 15-SP1-BCL:
    zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2021-2427=1
  • SUSE Linux Enterprise Module for Live Patching 15-SP1:
    zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP1-2021-2427=1
  • SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS:
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-2427=1
  • SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS:
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-2427=1
  • SUSE Linux Enterprise High Availability 15-SP1:
    zypper in -t patch SUSE-SLE-Product-HA-15-SP1-2021-2427=1
  • SUSE Enterprise Storage 6:
    zypper in -t patch SUSE-Storage-6-2021-2427=1
  • SUSE CaaS Platform 4.0:
    To install this update, use the SUSE CaaS Platform 'skuba' tool. I will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way.

Package List:

  • SUSE Manager Server 4.0 (ppc64le s390x x86_64):
    • kernel-default-4.12.14-197.99.1
    • kernel-default-base-4.12.14-197.99.1
    • kernel-default-base-debuginfo-4.12.14-197.99.1
    • kernel-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debugsource-4.12.14-197.99.1
    • kernel-default-devel-4.12.14-197.99.1
    • kernel-default-devel-debuginfo-4.12.14-197.99.1
    • kernel-obs-build-4.12.14-197.99.1
    • kernel-obs-build-debugsource-4.12.14-197.99.1
    • kernel-syms-4.12.14-197.99.1
    • reiserfs-kmp-default-4.12.14-197.99.1
    • reiserfs-kmp-default-debuginfo-4.12.14-197.99.1
  • SUSE Manager Server 4.0 (noarch):
    • kernel-devel-4.12.14-197.99.1
    • kernel-docs-4.12.14-197.99.1
    • kernel-macros-4.12.14-197.99.1
    • kernel-source-4.12.14-197.99.1
  • SUSE Manager Server 4.0 (s390x):
    • kernel-default-man-4.12.14-197.99.1
    • kernel-zfcpdump-debuginfo-4.12.14-197.99.1
    • kernel-zfcpdump-debugsource-4.12.14-197.99.1
  • SUSE Manager Retail Branch Server 4.0 (x86_64):
    • kernel-default-4.12.14-197.99.1
    • kernel-default-base-4.12.14-197.99.1
    • kernel-default-base-debuginfo-4.12.14-197.99.1
    • kernel-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debugsource-4.12.14-197.99.1
    • kernel-default-devel-4.12.14-197.99.1
    • kernel-default-devel-debuginfo-4.12.14-197.99.1
    • kernel-obs-build-4.12.14-197.99.1
    • kernel-obs-build-debugsource-4.12.14-197.99.1
    • kernel-syms-4.12.14-197.99.1
    • reiserfs-kmp-default-4.12.14-197.99.1
    • reiserfs-kmp-default-debuginfo-4.12.14-197.99.1
  • SUSE Manager Retail Branch Server 4.0 (noarch):
    • kernel-devel-4.12.14-197.99.1
    • kernel-docs-4.12.14-197.99.1
    • kernel-macros-4.12.14-197.99.1
    • kernel-source-4.12.14-197.99.1
  • SUSE Manager Proxy 4.0 (noarch):
    • kernel-devel-4.12.14-197.99.1
    • kernel-docs-4.12.14-197.99.1
    • kernel-macros-4.12.14-197.99.1
    • kernel-source-4.12.14-197.99.1
  • SUSE Manager Proxy 4.0 (x86_64):
    • kernel-default-4.12.14-197.99.1
    • kernel-default-base-4.12.14-197.99.1
    • kernel-default-base-debuginfo-4.12.14-197.99.1
    • kernel-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debugsource-4.12.14-197.99.1
    • kernel-default-devel-4.12.14-197.99.1
    • kernel-default-devel-debuginfo-4.12.14-197.99.1
    • kernel-obs-build-4.12.14-197.99.1
    • kernel-obs-build-debugsource-4.12.14-197.99.1
    • kernel-syms-4.12.14-197.99.1
    • reiserfs-kmp-default-4.12.14-197.99.1
    • reiserfs-kmp-default-debuginfo-4.12.14-197.99.1
  • SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64):
    • kernel-default-4.12.14-197.99.1
    • kernel-default-base-4.12.14-197.99.1
    • kernel-default-base-debuginfo-4.12.14-197.99.1
    • kernel-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debugsource-4.12.14-197.99.1
    • kernel-default-devel-4.12.14-197.99.1
    • kernel-default-devel-debuginfo-4.12.14-197.99.1
    • kernel-obs-build-4.12.14-197.99.1
    • kernel-obs-build-debugsource-4.12.14-197.99.1
    • kernel-syms-4.12.14-197.99.1
    • reiserfs-kmp-default-4.12.14-197.99.1
    • reiserfs-kmp-default-debuginfo-4.12.14-197.99.1
  • SUSE Linux Enterprise Server for SAP 15-SP1 (noarch):
    • kernel-devel-4.12.14-197.99.1
    • kernel-docs-4.12.14-197.99.1
    • kernel-macros-4.12.14-197.99.1
    • kernel-source-4.12.14-197.99.1
  • SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64):
    • kernel-default-4.12.14-197.99.1
    • kernel-default-base-4.12.14-197.99.1
    • kernel-default-base-debuginfo-4.12.14-197.99.1
    • kernel-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debugsource-4.12.14-197.99.1
    • kernel-default-devel-4.12.14-197.99.1
    • kernel-default-devel-debuginfo-4.12.14-197.99.1
    • kernel-obs-build-4.12.14-197.99.1
    • kernel-obs-build-debugsource-4.12.14-197.99.1
    • kernel-syms-4.12.14-197.99.1
    • reiserfs-kmp-default-4.12.14-197.99.1
    • reiserfs-kmp-default-debuginfo-4.12.14-197.99.1
  • SUSE Linux Enterprise Server 15-SP1-LTSS (noarch):
    • kernel-devel-4.12.14-197.99.1
    • kernel-docs-4.12.14-197.99.1
    • kernel-macros-4.12.14-197.99.1
    • kernel-source-4.12.14-197.99.1
  • SUSE Linux Enterprise Server 15-SP1-LTSS (s390x):
    • kernel-default-man-4.12.14-197.99.1
    • kernel-zfcpdump-debuginfo-4.12.14-197.99.1
    • kernel-zfcpdump-debugsource-4.12.14-197.99.1
  • SUSE Linux Enterprise Server 15-SP1-BCL (x86_64):
    • kernel-default-4.12.14-197.99.1
    • kernel-default-base-4.12.14-197.99.1
    • kernel-default-base-debuginfo-4.12.14-197.99.1
    • kernel-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debugsource-4.12.14-197.99.1
    • kernel-default-devel-4.12.14-197.99.1
    • kernel-default-devel-debuginfo-4.12.14-197.99.1
    • kernel-obs-build-4.12.14-197.99.1
    • kernel-obs-build-debugsource-4.12.14-197.99.1
    • kernel-syms-4.12.14-197.99.1
    • reiserfs-kmp-default-4.12.14-197.99.1
    • reiserfs-kmp-default-debuginfo-4.12.14-197.99.1
  • SUSE Linux Enterprise Server 15-SP1-BCL (noarch):
    • kernel-devel-4.12.14-197.99.1
    • kernel-docs-4.12.14-197.99.1
    • kernel-macros-4.12.14-197.99.1
    • kernel-source-4.12.14-197.99.1
  • SUSE Linux Enterprise Module for Live Patching 15-SP1 (ppc64le x86_64):
    • kernel-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debugsource-4.12.14-197.99.1
    • kernel-default-livepatch-4.12.14-197.99.1
    • kernel-default-livepatch-devel-4.12.14-197.99.1
    • kernel-livepatch-4_12_14-197_99-default-1-3.3.3
  • SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64):
    • kernel-default-4.12.14-197.99.1
    • kernel-default-base-4.12.14-197.99.1
    • kernel-default-base-debuginfo-4.12.14-197.99.1
    • kernel-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debugsource-4.12.14-197.99.1
    • kernel-default-devel-4.12.14-197.99.1
    • kernel-default-devel-debuginfo-4.12.14-197.99.1
    • kernel-obs-build-4.12.14-197.99.1
    • kernel-obs-build-debugsource-4.12.14-197.99.1
    • kernel-syms-4.12.14-197.99.1
  • SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch):
    • kernel-devel-4.12.14-197.99.1
    • kernel-docs-4.12.14-197.99.1
    • kernel-macros-4.12.14-197.99.1
    • kernel-source-4.12.14-197.99.1
  • SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64):
    • kernel-default-4.12.14-197.99.1
    • kernel-default-base-4.12.14-197.99.1
    • kernel-default-base-debuginfo-4.12.14-197.99.1
    • kernel-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debugsource-4.12.14-197.99.1
    • kernel-default-devel-4.12.14-197.99.1
    • kernel-default-devel-debuginfo-4.12.14-197.99.1
    • kernel-obs-build-4.12.14-197.99.1
    • kernel-obs-build-debugsource-4.12.14-197.99.1
    • kernel-syms-4.12.14-197.99.1
  • SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch):
    • kernel-devel-4.12.14-197.99.1
    • kernel-docs-4.12.14-197.99.1
    • kernel-macros-4.12.14-197.99.1
    • kernel-source-4.12.14-197.99.1
  • SUSE Linux Enterprise High Availability 15-SP1 (aarch64 ppc64le s390x x86_64):
    • cluster-md-kmp-default-4.12.14-197.99.1
    • cluster-md-kmp-default-debuginfo-4.12.14-197.99.1
    • dlm-kmp-default-4.12.14-197.99.1
    • dlm-kmp-default-debuginfo-4.12.14-197.99.1
    • gfs2-kmp-default-4.12.14-197.99.1
    • gfs2-kmp-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debugsource-4.12.14-197.99.1
    • ocfs2-kmp-default-4.12.14-197.99.1
    • ocfs2-kmp-default-debuginfo-4.12.14-197.99.1
  • SUSE Enterprise Storage 6 (aarch64 x86_64):
    • kernel-default-4.12.14-197.99.1
    • kernel-default-base-4.12.14-197.99.1
    • kernel-default-base-debuginfo-4.12.14-197.99.1
    • kernel-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debugsource-4.12.14-197.99.1
    • kernel-default-devel-4.12.14-197.99.1
    • kernel-default-devel-debuginfo-4.12.14-197.99.1
    • kernel-obs-build-4.12.14-197.99.1
    • kernel-obs-build-debugsource-4.12.14-197.99.1
    • kernel-syms-4.12.14-197.99.1
    • reiserfs-kmp-default-4.12.14-197.99.1
    • reiserfs-kmp-default-debuginfo-4.12.14-197.99.1
  • SUSE Enterprise Storage 6 (noarch):
    • kernel-devel-4.12.14-197.99.1
    • kernel-docs-4.12.14-197.99.1
    • kernel-macros-4.12.14-197.99.1
    • kernel-source-4.12.14-197.99.1
  • SUSE CaaS Platform 4.0 (noarch):
    • kernel-devel-4.12.14-197.99.1
    • kernel-docs-4.12.14-197.99.1
    • kernel-macros-4.12.14-197.99.1
    • kernel-source-4.12.14-197.99.1
  • SUSE CaaS Platform 4.0 (x86_64):
    • kernel-default-4.12.14-197.99.1
    • kernel-default-base-4.12.14-197.99.1
    • kernel-default-base-debuginfo-4.12.14-197.99.1
    • kernel-default-debuginfo-4.12.14-197.99.1
    • kernel-default-debugsource-4.12.14-197.99.1
    • kernel-default-devel-4.12.14-197.99.1
    • kernel-default-devel-debuginfo-4.12.14-197.99.1
    • kernel-obs-build-4.12.14-197.99.1
    • kernel-obs-build-debugsource-4.12.14-197.99.1
    • kernel-syms-4.12.14-197.99.1
    • reiserfs-kmp-default-4.12.14-197.99.1
    • reiserfs-kmp-default-debuginfo-4.12.14-197.99.1

References: