[LU-14874] kernel update [SLES12 SP5 4.12.14-122.80.1]

• Type: Improvement
• Resolution: Won't Fix
• Priority: Minor
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various
security and bugfixes.

The following security bugs were fixed:

• CVE-2021-22555: Fixed an heap out-of-bounds write in
  net/netfilter/x_tables.c that could allow local provilege escalation.
  (bsc#1188116)
• CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer
  that allows to obtain full root privileges. (bsc#1188062)
• CVE-2021-3609: Fixed a race condition in the CAN BCM networking protocol
  which allows for local privilege escalation. (bsc#1187215)
• CVE-2021-3612: Fixed an out-of-bounds memory write flaw which could
  allows a local user to crash the system or possibly escalate their
  privileges on the system. (bsc#1187585)
• CVE-2020-36385: Fixed a use-after-free flaw in ucma.c which allows for
  local privilege escalation. (bsc#1187050)

The following non-security bugs were fixed:
https://lists.suse.com/pipermail/sle-security-updates/2021-July/009169.html

Issue Links

• is related to: LU-14934 kernel update [SLES12 SP5 4.12.14-122.83.1]
• is related to: LU-14775 kernel update [SLES12 SP5 4.12.14-122.74.1]