OESA-2021-1453

Dashboard / Vulnerabilities / OESA-2021-1453

OESA-2021-1453

Summary: kernel security update

Details: The Linux Kernel, the operating system core itself. Security Fix(es): A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2021-3759) A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The highest threat from this vulnerability is to data confidentiality.(CVE-2021-3753)

References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1453, https://nvd.nist.gov/vuln/detail/CVE-2021-3759, https://nvd.nist.gov/vuln/detail/CVE-2021-3753