[LU-15154] kernel update [SLES15 SP3 5.3.18-59.27.1]

• Type: Improvement
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.15.0
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

The SUSE Linux Enterprise 15 SP3 kernel was updated.

The following security bugs were fixed:

• CVE-2020-3702: Fixed a bug which could be triggered with specifically
  timed and handcrafted traffic and cause internal errors in a WLAN device
  that lead to improper layer 2 Wi-Fi encryption with a consequent
  possibility of information disclosure. (bnc#1191193)
• CVE-2021-3752: Fixed a use after free vulnerability in the Linux
  kernel's bluetooth module. (bsc#1190023)
• CVE-2021-40490: Fixed a race condition discovered in the ext4 subsystem
  that could leat to local priviledge escalation. (bnc#1190159)
• CVE-2021-3744: Fixed a bug which could allows attackers to cause a
  denial of service. (bsc#1189884)
• CVE-2021-3764: Fixed a bug which could allows attackers to cause a
  denial of service. (bsc#1190534)
• CVE-2021-3669: Fixed a bug that doesn't allow /proc/sysvipc/shm to scale
  with large shared memory segment counts which could lead to resource
  exhaustion and DoS. (bsc#1188986)
• CVE-2021-3759: Unaccounted ipc objects in Linux kernel could have lead
  to breaking memcg limits and DoS attacks (bsc#1190115).

The following non-security bugs were fixed:
https://lists.suse.com/pipermail/sle-security-updates/2021-October/009583.html

Issue Links

• is related to: LU-15302 kernel update [SLES15 SP3 5.3.18-59.34.1]
• is related to: LU-15036 kernel update [SLES15 SP3 5.3.18-59.24.1]