← Search the atlas
SUSE-SU-2021:0870-1
Not scored
Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_116 fixes several issues.
The following security issues were fixed:
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
Exploit probability
Not scored
Published
March 17, 2021
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_34
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_35
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_36
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_37
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_38
SUSE:Linux Enterprise Server 12 SP3-LTSS
kgraft-patch-SLE12-SP3_Update_31
SUSE:Linux Enterprise Server 12 SP3-LTSS
kgraft-patch-SLE12-SP3_Update_32
SUSE:Linux Enterprise Server 12 SP3-LTSS
kgraft-patch-SLE12-SP3_Update_33
SUSE:Linux Enterprise Server 12 SP3-LTSS
kgraft-patch-SLE12-SP3_Update_34
SUSE:Linux Enterprise Server 12 SP3-LTSS
kgraft-patch-SLE12-SP3_Update_35
SUSE:Linux Enterprise Server 12 SP3-LTSS
kgraft-patch-SLE12-SP3_Update_36
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_34
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_35
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_36
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_37
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_38
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
kgraft-patch-SLE12-SP3_Update_31
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
kgraft-patch-SLE12-SP3_Update_32
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
kgraft-patch-SLE12-SP3_Update_33
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
kgraft-patch-SLE12-SP3_Update_34
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
kgraft-patch-SLE12-SP3_Update_35
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
kgraft-patch-SLE12-SP3_Update_36
SUSE:OpenStack Cloud 7
kgraft-patch-SLE12-SP2_Update_36
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2021:0870-1
This update for the Linux Kernel 4.4.180-94_116 fixes several issues.
The following security issues were fixed:
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
View original source ↗
05 / REFERENCES
Further evidence