Rapid7 Vulnerability & Exploit Database

SUSE: CVE-2021-3444: SUSE Linux Security Advisory

Back to Search

SUSE: CVE-2021-3444: SUSE Linux Security Advisory

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
Published
03/23/2021
Created
04/13/2021
Added
04/10/2021
Modified
10/26/2022

Description

The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero") and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101.

Solution(s)

  • suse-upgrade-cluster-md-kmp-64kb
  • suse-upgrade-cluster-md-kmp-azure
  • suse-upgrade-cluster-md-kmp-default
  • suse-upgrade-cluster-md-kmp-preempt
  • suse-upgrade-cluster-md-kmp-rt
  • suse-upgrade-cluster-md-kmp-rt_debug
  • suse-upgrade-dlm-kmp-64kb
  • suse-upgrade-dlm-kmp-azure
  • suse-upgrade-dlm-kmp-default
  • suse-upgrade-dlm-kmp-preempt
  • suse-upgrade-dlm-kmp-rt
  • suse-upgrade-dlm-kmp-rt_debug
  • suse-upgrade-gfs2-kmp-64kb
  • suse-upgrade-gfs2-kmp-azure
  • suse-upgrade-gfs2-kmp-default
  • suse-upgrade-gfs2-kmp-preempt
  • suse-upgrade-gfs2-kmp-rt
  • suse-upgrade-gfs2-kmp-rt_debug
  • suse-upgrade-kernel-64kb
  • suse-upgrade-kernel-64kb-devel
  • suse-upgrade-kernel-64kb-extra
  • suse-upgrade-kernel-64kb-livepatch-devel
  • suse-upgrade-kernel-64kb-optional
  • suse-upgrade-kernel-azure
  • suse-upgrade-kernel-azure-base
  • suse-upgrade-kernel-azure-devel
  • suse-upgrade-kernel-azure-extra
  • suse-upgrade-kernel-azure-livepatch-devel
  • suse-upgrade-kernel-azure-optional
  • suse-upgrade-kernel-debug
  • suse-upgrade-kernel-debug-devel
  • suse-upgrade-kernel-debug-livepatch-devel
  • suse-upgrade-kernel-default
  • suse-upgrade-kernel-default-base
  • suse-upgrade-kernel-default-base-rebuild
  • suse-upgrade-kernel-default-devel
  • suse-upgrade-kernel-default-extra
  • suse-upgrade-kernel-default-livepatch
  • suse-upgrade-kernel-default-livepatch-devel
  • suse-upgrade-kernel-default-man
  • suse-upgrade-kernel-default-optional
  • suse-upgrade-kernel-devel
  • suse-upgrade-kernel-devel-azure
  • suse-upgrade-kernel-devel-rt
  • suse-upgrade-kernel-docs
  • suse-upgrade-kernel-docs-html
  • suse-upgrade-kernel-kvmsmall
  • suse-upgrade-kernel-kvmsmall-devel
  • suse-upgrade-kernel-kvmsmall-livepatch-devel
  • suse-upgrade-kernel-livepatch-4_12_14-150_52-default
  • suse-upgrade-kernel-livepatch-4_12_14-150_55-default
  • suse-upgrade-kernel-livepatch-4_12_14-150_58-default
  • suse-upgrade-kernel-livepatch-4_12_14-150_63-default
  • suse-upgrade-kernel-livepatch-4_12_14-150_66-default
  • suse-upgrade-kernel-livepatch-4_12_14-150_69-default
  • suse-upgrade-kernel-livepatch-4_12_14-150_72-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_40-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_45-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_48-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_51-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_56-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_61-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_64-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_67-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_72-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_75-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_78-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_83-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_86-default
  • suse-upgrade-kernel-livepatch-4_12_14-197_89-default
  • suse-upgrade-kernel-livepatch-5_3_18-22-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_12-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_15-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_24-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_29-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_34-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_37-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_43-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_46-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_49-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_52-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_53_4-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_61-default
  • suse-upgrade-kernel-livepatch-5_3_18-24_9-default
  • suse-upgrade-kernel-livepatch-5_3_18-59_5-default
  • suse-upgrade-kernel-macros
  • suse-upgrade-kernel-obs-build
  • suse-upgrade-kernel-obs-qa
  • suse-upgrade-kernel-preempt
  • suse-upgrade-kernel-preempt-devel
  • suse-upgrade-kernel-preempt-extra
  • suse-upgrade-kernel-preempt-livepatch-devel
  • suse-upgrade-kernel-preempt-optional
  • suse-upgrade-kernel-rt
  • suse-upgrade-kernel-rt-devel
  • suse-upgrade-kernel-rt-extra
  • suse-upgrade-kernel-rt_debug
  • suse-upgrade-kernel-rt_debug-devel
  • suse-upgrade-kernel-rt_debug-extra
  • suse-upgrade-kernel-source
  • suse-upgrade-kernel-source-azure
  • suse-upgrade-kernel-source-rt
  • suse-upgrade-kernel-source-vanilla
  • suse-upgrade-kernel-syms
  • suse-upgrade-kernel-syms-azure
  • suse-upgrade-kernel-syms-rt
  • suse-upgrade-kernel-vanilla-base
  • suse-upgrade-kernel-zfcpdump
  • suse-upgrade-kselftests-kmp-64kb
  • suse-upgrade-kselftests-kmp-azure
  • suse-upgrade-kselftests-kmp-default
  • suse-upgrade-kselftests-kmp-preempt
  • suse-upgrade-kselftests-kmp-rt
  • suse-upgrade-kselftests-kmp-rt_debug
  • suse-upgrade-ocfs2-kmp-64kb
  • suse-upgrade-ocfs2-kmp-azure
  • suse-upgrade-ocfs2-kmp-default
  • suse-upgrade-ocfs2-kmp-preempt
  • suse-upgrade-ocfs2-kmp-rt
  • suse-upgrade-ocfs2-kmp-rt_debug
  • suse-upgrade-reiserfs-kmp-64kb
  • suse-upgrade-reiserfs-kmp-azure
  • suse-upgrade-reiserfs-kmp-default
  • suse-upgrade-reiserfs-kmp-preempt
  • suse-upgrade-reiserfs-kmp-rt
  • suse-upgrade-reiserfs-kmp-rt_debug

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;