OESA-2021-1310

Dashboard / Vulnerabilities / OESA-2021-1310

OESA-2021-1310

Summary: kernel security update

Details: The Linux Kernel, the operating system core itself. Security Fix(es): A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability.(CVE-2021-3659) arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.(CVE-2021-37576) A vulnerability was found in the Linux kernel in versions before v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory.(CVE-2021-3655). No description is available for this CVE.(CVE-2022-0850).

References: https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1310, https://nvd.nist.gov/vuln/detail/CVE-2021-3659, https://nvd.nist.gov/vuln/detail/CVE-2021-37576, https://nvd.nist.gov/vuln/detail/CVE-2021-3655, https://nvd.nist.gov/vuln/detail/CVE-2022-0850