{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"important"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"text":"Copyright 2023 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)","title":"Title of the patch"},{"category":"description","text":"This update for the Linux Kernel 5.3.18-57 fixes several issues.\n\nThe following issues were fixed:\n\n- CVE-2021-3489: Fixed an issue where the eBPF RINGBUF bpf_ringbuf_reserve did not check that the allocated size was smaller than the ringbuf size (bsc#1185640).\n- CVE-2021-3490: Fixed an issue where the eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) did not update the 32-bit bounds (bsc#1185641).\n- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).\n- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bsc#1184611).\n- CVE-2020-36322: Fixed an issue was discovered in FUSE filesystem implementation which could have caused a system crash (bsc#1184211).\n- CVE-2021-29154: Fixed incorrect computation of branch displacements, allowing arbitrary code execution (bsc#1184391).\n- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183593).\n- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185847).\n","title":"Description of the patch"},{"category":"details","text":"SUSE-2021-2198,SUSE-SLE-Module-Live-Patching-15-SP3-2021-2198","title":"Patchnames"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"self","summary":"URL for SUSE-SU-2021:2198-1","url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212198-1/"},{"category":"external","summary":"SUSE ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"self","summary":"URL of this CSAF notice","url":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_2198-1.json"},{"category":"self","summary":"E-Mail link for SUSE-SU-2021:2198-1","url":"https://lists.suse.com/pipermail/sle-security-updates/2021-June/009102.html"},{"category":"self","summary":"SUSE Bug 1183658","url":"https://bugzilla.suse.com/1183658"},{"category":"self","summary":"SUSE Bug 1184710","url":"https://bugzilla.suse.com/1184710"},{"category":"self","summary":"SUSE Bug 1184952","url":"https://bugzilla.suse.com/1184952"},{"category":"self","summary":"SUSE Bug 1185796","url":"https://bugzilla.suse.com/1185796"},{"category":"self","summary":"SUSE Bug 1185847","url":"https://bugzilla.suse.com/1185847"},{"category":"self","summary":"SUSE Bug 1185856","url":"https://bugzilla.suse.com/1185856"},{"category":"self","summary":"SUSE Bug 1185899","url":"https://bugzilla.suse.com/1185899"},{"category":"self","summary":"SUSE Bug 1186285","url":"https://bugzilla.suse.com/1186285"},{"category":"self","summary":"SUSE CVE CVE-2020-36322 page","url":"https://www.suse.com/security/cve/CVE-2020-36322/"},{"category":"self","summary":"SUSE CVE CVE-2021-28660 page","url":"https://www.suse.com/security/cve/CVE-2021-28660/"},{"category":"self","summary":"SUSE CVE CVE-2021-29154 page","url":"https://www.suse.com/security/cve/CVE-2021-29154/"},{"category":"self","summary":"SUSE CVE CVE-2021-32399 page","url":"https://www.suse.com/security/cve/CVE-2021-32399/"},{"category":"self","summary":"SUSE CVE CVE-2021-33034 page","url":"https://www.suse.com/security/cve/CVE-2021-33034/"},{"category":"self","summary":"SUSE CVE CVE-2021-3489 page","url":"https://www.suse.com/security/cve/CVE-2021-3489/"},{"category":"self","summary":"SUSE CVE CVE-2021-3490 page","url":"https://www.suse.com/security/cve/CVE-2021-3490/"}],"title":"Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)","tracking":{"current_release_date":"2021-06-29T08:59:01Z","generator":{"date":"2021-06-29T08:59:01Z","engine":{"name":"cve-database.git:bin/generate-csaf.pl","version":"1"}},"id":"SUSE-SU-2021:2198-1","initial_release_date":"2021-06-29T08:59:01Z","revision_history":[{"date":"2021-06-29T08:59:01Z","number":"1","summary":"Current version"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version","name":"kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","product":{"name":"kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","product_id":"kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le"}}],"category":"architecture","name":"ppc64le"},{"branches":[{"category":"product_version","name":"kernel-livepatch-5_3_18-57-default-2-3.1.s390x","product":{"name":"kernel-livepatch-5_3_18-57-default-2-3.1.s390x","product_id":"kernel-livepatch-5_3_18-57-default-2-3.1.s390x"}}],"category":"architecture","name":"s390x"},{"branches":[{"category":"product_version","name":"kernel-livepatch-5_3_18-57-default-2-3.1.x86_64","product":{"name":"kernel-livepatch-5_3_18-57-default-2-3.1.x86_64","product_id":"kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"}},{"category":"product_version","name":"kernel-livepatch-5_3_18-57-preempt-2-3.1.x86_64","product":{"name":"kernel-livepatch-5_3_18-57-preempt-2-3.1.x86_64","product_id":"kernel-livepatch-5_3_18-57-preempt-2-3.1.x86_64"}}],"category":"architecture","name":"x86_64"},{"branches":[{"category":"product_name","name":"SUSE Linux Enterprise Live Patching 15 SP3","product":{"name":"SUSE Linux Enterprise Live Patching 15 SP3","product_id":"SUSE Linux Enterprise Live Patching 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-live-patching:15:sp3"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP3","product_id":"SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le"},"product_reference":"kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","relates_to_product_reference":"SUSE Linux Enterprise Live Patching 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"kernel-livepatch-5_3_18-57-default-2-3.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP3","product_id":"SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x"},"product_reference":"kernel-livepatch-5_3_18-57-default-2-3.1.s390x","relates_to_product_reference":"SUSE Linux Enterprise Live Patching 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"kernel-livepatch-5_3_18-57-default-2-3.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP3","product_id":"SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"},"product_reference":"kernel-livepatch-5_3_18-57-default-2-3.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Live Patching 15 SP3"}]},"vulnerabilities":[{"cve":"CVE-2020-36322","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2020-36322"}],"notes":[{"category":"general","text":"An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2020-36322","url":"https://www.suse.com/security/cve/CVE-2020-36322"},{"category":"external","summary":"SUSE Bug 1184211 for CVE-2020-36322","url":"https://bugzilla.suse.com/1184211"},{"category":"external","summary":"SUSE Bug 1184952 for CVE-2020-36322","url":"https://bugzilla.suse.com/1184952"},{"category":"external","summary":"SUSE Bug 1189302 for CVE-2020-36322","url":"https://bugzilla.suse.com/1189302"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7.7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"threats":[{"category":"impact","date":"2021-06-29T08:59:01Z","details":"important"}],"title":"CVE-2020-36322"},{"cve":"CVE-2021-28660","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2021-28660"}],"notes":[{"category":"general","text":"rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2021-28660","url":"https://www.suse.com/security/cve/CVE-2021-28660"},{"category":"external","summary":"SUSE Bug 1183593 for CVE-2021-28660","url":"https://bugzilla.suse.com/1183593"},{"category":"external","summary":"SUSE Bug 1183658 for CVE-2021-28660","url":"https://bugzilla.suse.com/1183658"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"threats":[{"category":"impact","date":"2021-06-29T08:59:01Z","details":"important"}],"title":"CVE-2021-28660"},{"cve":"CVE-2021-29154","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2021-29154"}],"notes":[{"category":"general","text":"BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2021-29154","url":"https://www.suse.com/security/cve/CVE-2021-29154"},{"category":"external","summary":"SUSE Bug 1184391 for CVE-2021-29154","url":"https://bugzilla.suse.com/1184391"},{"category":"external","summary":"SUSE Bug 1184710 for CVE-2021-29154","url":"https://bugzilla.suse.com/1184710"},{"category":"external","summary":"SUSE Bug 1186408 for CVE-2021-29154","url":"https://bugzilla.suse.com/1186408"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"threats":[{"category":"impact","date":"2021-06-29T08:59:01Z","details":"moderate"}],"title":"CVE-2021-29154"},{"cve":"CVE-2021-32399","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2021-32399"}],"notes":[{"category":"general","text":"net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2021-32399","url":"https://www.suse.com/security/cve/CVE-2021-32399"},{"category":"external","summary":"SUSE Bug 1184611 for CVE-2021-32399","url":"https://bugzilla.suse.com/1184611"},{"category":"external","summary":"SUSE Bug 1185898 for CVE-2021-32399","url":"https://bugzilla.suse.com/1185898"},{"category":"external","summary":"SUSE Bug 1185899 for CVE-2021-32399","url":"https://bugzilla.suse.com/1185899"},{"category":"external","summary":"SUSE Bug 1196174 for CVE-2021-32399","url":"https://bugzilla.suse.com/1196174"},{"category":"external","summary":"SUSE Bug 1200084 for CVE-2021-32399","url":"https://bugzilla.suse.com/1200084"},{"category":"external","summary":"SUSE Bug 1201734 for CVE-2021-32399","url":"https://bugzilla.suse.com/1201734"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7.4,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"threats":[{"category":"impact","date":"2021-06-29T08:59:01Z","details":"important"}],"title":"CVE-2021-32399"},{"cve":"CVE-2021-33034","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2021-33034"}],"notes":[{"category":"general","text":"In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2021-33034","url":"https://www.suse.com/security/cve/CVE-2021-33034"},{"category":"external","summary":"SUSE Bug 1186111 for CVE-2021-33034","url":"https://bugzilla.suse.com/1186111"},{"category":"external","summary":"SUSE Bug 1186285 for CVE-2021-33034","url":"https://bugzilla.suse.com/1186285"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7.7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"threats":[{"category":"impact","date":"2021-06-29T08:59:01Z","details":"important"}],"title":"CVE-2021-33034"},{"cve":"CVE-2021-3489","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2021-3489"}],"notes":[{"category":"general","text":"The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee (\"bpf, ringbuf: Deny reserve of buffers larger than ringbuf\") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced via 457f44363a88 (\"bpf: Implement BPF ring buffer and verifier support for it\") (v5.8-rc1).","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2021-3489","url":"https://www.suse.com/security/cve/CVE-2021-3489"},{"category":"external","summary":"SUSE Bug 1185640 for CVE-2021-3489","url":"https://bugzilla.suse.com/1185640"},{"category":"external","summary":"SUSE Bug 1185856 for CVE-2021-3489","url":"https://bugzilla.suse.com/1185856"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":8.4,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"threats":[{"category":"impact","date":"2021-06-29T08:59:01Z","details":"important"}],"title":"CVE-2021-3489"},{"cve":"CVE-2021-3490","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2021-3490"}],"notes":[{"category":"general","text":"The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e (\"bpf: Fix alu32 const subreg bound tracking on bitwise operations\") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. The AND/OR issues were introduced by commit 3f50f132d840 (\"bpf: Verifier, do explicit ALU32 bounds tracking\") (5.7-rc1) and the XOR variant was introduced by 2921c90d4718 (\"bpf:Fix a verifier failure with xor\") ( 5.10-rc1).","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2021-3490","url":"https://www.suse.com/security/cve/CVE-2021-3490"},{"category":"external","summary":"SUSE Bug 1185641 for CVE-2021-3490","url":"https://bugzilla.suse.com/1185641"},{"category":"external","summary":"SUSE Bug 1185796 for CVE-2021-3490","url":"https://bugzilla.suse.com/1185796"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":8.4,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.ppc64le","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.s390x","SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-57-default-2-3.1.x86_64"]}],"threats":[{"category":"impact","date":"2021-06-29T08:59:01Z","details":"important"}],"title":"CVE-2021-3490"}]}