[LU-15159] kernel update [SLES15 SP2 5.3.18-24.86.2]

• Type: Improvement
• Resolution: Won't Fix
• Priority: Minor
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

The SUSE Linux Enterprise 15 SP2 kernel was updated.

The following security bugs were fixed:

• CVE-2020-3702: Fixed a bug which could be triggered with specifically
  timed and handcrafted traffic and cause internal errors in a WLAN device
  that lead to improper layer 2 Wi-Fi encryption with a consequent
  possibility of information disclosure. (bnc#1191193)
• CVE-2021-3752: Fixed a use after free vulnerability in the Linux
  kernel's bluetooth module. (bsc#1190023)
• CVE-2021-40490: Fixed a race condition discovered in the ext4 subsystem
  that could leat to local priviledge escalation. (bnc#1190159)
• CVE-2021-3744: Fixed a bug which could allows attackers to cause a
  denial of service. (bsc#1189884)
• CVE-2021-3764: Fixed a bug which could allows attackers to cause a
  denial of service. (bsc#1190534)
• CVE-2021-3669: Fixed a bug that doesn't allow /proc/sysvipc/shm to scale
  with large shared memory segment counts which could lead to resource
  exhaustion and DoS. (bsc#1188986)

The following non-security bugs were fixed:
https://lists.suse.com/pipermail/sle-security-updates/2021-October/009597.html

Issue Links

• is related to: LU-15301 kernel update [SLES15 SP2 5.3.18-24.93.1]
• is related to: LU-15035 kernel update [SLES15 SP2 5.3.18-24.83.2]