SUSE-SU-2021:0521-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 19 Feb 2021, 10:00
Last modified:04 Feb 2026, 02:31

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

19 Feb 2021, 10:00
Published
Vulnerability first disclosed
04 Feb 2026, 02:31
Last Modified
Vulnerability information updated

Description

Security update for qemu This update for qemu fixes the following issues: - Fixed potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137) - Fixed out-of-bound access in iscsi (CVE-2020-11947 bsc#1180523) - Fixed out-of-bound access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639) - Fixed out-of-bound access in ARM interrupt handling (CVE-2021-20221 bsc#1181933) - Fixed vfio-pci device on s390 enters error state (bsc#1179717 bsc#1179719) - Fixed 'Failed to try-restart qemu-ga@.service' error while updating the qemu-guest-agent. (bsc#1178565) - Apply fixes to qemu scsi passthrough with respect to timeout and error conditions, including using more correct status codes. Add more qemu tracing which helped track down these issues (bsc#1178049)

Affected Systems

  • suse•qemu&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2

    < 4.2.1-11.13.1

  • suse•qemu&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2

    < 4.2.1-11.13.1

References (13)