File _patchinfo of Package patchinfo.21837

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.21837

<patchinfo incident="21837">
  <issue id="1191318" tracker="bnc">VUL-0: CVE-2021-41864: kernel live patch: eBPF multiplication integer overflow in prealloc_elems_and_freelist() in kernel/bpf/stackmap.c leads to out-of-bounds write</issue>
  <issue id="1191646" tracker="bnc">VUL-0: CVE-2021-34866: kernel live patch: Linux Kernel eBPF Type Confusion Privilege Escalation Vulnerability</issue>
  <issue id="2021-34866" tracker="cve" />
  <issue id="2021-41864" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager>
  <description>This update for the Linux Kernel 5.3.18-59_16 fixes several issues.

The following security issues were fixed:

- CVE-2021-34866: Fixed possible eBPF Type Confusion privilege escalation vulnerability via eBPF type confusion (bsc#1191646).
- CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
</description>
<summary>Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP3)</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.21837

Places