SUSE-SU-2021:1248-1: kernel-azure&distro=SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2021:1248-1 is a vulnerability in kernel-azure&distro=SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 9 · Downstream 0 · Related 9Timeline
- 16-04-2021PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25670, CVE-2020-25671, CVE-2020-25672, CVE-2020-25673: Fixed multiple bugs in NFC subsytem (bsc#1178181). - CVE-2020-36311: Fixed a denial of service (soft lockup) by triggering destruction of a large SEV VM (bsc#1184511). - CVE-2021-29154: Fixed incorrect computation of branch displacements, allowing arbitrary code execution (bsc#1184391). - CVE-2021-30002: Fixed a memory leak for large arguments in video_usercopy (bsc#1184120). - CVE-2021-3483: Fixed a use-after-free in nosy.c (bsc#1184393). - CVE-2021-20219: Fixed a denial of service in n_tty_receive_char_special (bsc#1184397). The following non-security bugs were fixed: - cifs: do not send close in compound create+close requests (bsc#1181507). - net: sched: disable TCQ_F_NOLOCK for pfifo_fast (bsc#1183405) - powerpc/64s: Fix instruction encoding for lis in ppc_function_entry() (bsc#1065729). - powerpc/pmem: Include pmem prototypes (bsc#1113295 git-fixes). - powerpc/pseries/ras: Remove unused variable 'status' (bsc#1065729). - s390/pci: Fix s390_mmio_read/write with MIO (LTC#192079 bsc#1183755). - vsprintf: Do not have bprintf dereference pointers (bsc#1184494). - vsprintf: Do not preprocess non-dereferenced pointers for bprintf (%px and %pK) (bsc#1184494). - vsprintf: Fix off-by-one bug in bstr_printf() processing dereferenced pointers (bsc#1184494). - x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc() (12sp5). - xen/events: fix setting irq affinity (bsc#1184583).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse6 products
- kernel-azure&distro=SUSE Linux Enterprise Server 12 SP5< 4.12.14-16.53.1
- kernel-azure&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 4.12.14-16.53.1
- kernel-source-azure&distro=SUSE Linux Enterprise Server 12 SP5< 4.12.14-16.53.1
- kernel-source-azure&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 4.12.14-16.53.1
- kernel-syms-azure&distro=SUSE Linux Enterprise Server 12 SP5< 4.12.14-16.53.1
1 vendor · 6 products