{"id":"MGASA-2021-0117","summary":"Updated kernel packages fix security issues and possible filesystem corruption","details":"This kernel update is based on upstream 5.10.20 and fixes at least the\nfollowing security issues:\n\nA NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau\ndriver functionality in versions prior to 5.12-rc1 in the way the user calls\nioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to\ncrash the system. (CVE-2020-25639).\n\nAn issue was discovered in the Linux kernel through 5.11.3, as used with\nXen PV. A certain part of the netback driver lacks necessary treatment of\nerrors such as failed memory allocations (as a result of changes to the\nhandling of grant mapping errors). A host OS denial of service may occur\nduring misbehavior of a networking frontend driver. NOTE: this issue\nexists because of an incomplete fix for CVE-2021-26931.\n(CVE-2021-28038 / XSA-367)\n\nAn issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used\nwith Xen. In some less-common configurations, an x86 PV guest OS user can\ncrash a Dom0 or driver domain via a large amount of I/O activity. The\nissue relates to misuse of guest physical addresses when a configuration\nhas CONFIG_XEN_UNPOPULATED_ALLOC but not CONFIG_XEN_BALLOON_MEMORY_HOTPLUG.\n(CVE-2021-28039 / XSA-369)\n\nIt also adds a critical fix for filesystem level corruption:\n- on setups with swapfiles on filesystems sitting on top of brd, zram,\n  btt or pmem, then when the system starts to swap out pages, at which\n  point it corrupts filesystem blocks that don't belong to the swapfile.\n\nIt also adds the following fixes:\n- Input: elan_i2c - add new trackpoint report type 0x5F\n- Input: elantech - fix protocol errors for some trackpoints\n- net: usb: qmi_wwan: support ZTE P685M modem\n- tty: fix up iterate_tty_read() EOVERFLOW handling\n- tty: fix up hung_up_tty_read() conversion\n- tty: clean up legacy leftovers from n_tty line discipline\n- tty: teach n_tty line discipline about the new \"cookie continuations\"\n- tty: teach the n_tty ICANON case about the new \"cookie continuations\" too\n- x86_64-server config:\n  * enable NUMA balancing\n  * make CONNECTOR builtin to enable PROC_EVENTS (mga#28312)\n  * support 512 cores/threads\n\nFor other upstream fixes, see the referenced changelogs.\n","modified":"2026-04-16T04:43:30.481923525Z","published":"2021-03-07T21:35:49Z","upstream":["CVE-2020-25639","CVE-2021-28038","CVE-2021-28039"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2021-0117.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=28541"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=28312"},{"type":"WEB","url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.20"},{"type":"ADVISORY","url":"https://xenbits.xen.org/xsa/advisory-367.html"},{"type":"ADVISORY","url":"https://xenbits.xen.org/xsa/advisory-369.html"}],"affected":[{"package":{"name":"kernel","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/kernel?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.20-2.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0117.json"}},{"package":{"name":"kmod-virtualbox","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/kmod-virtualbox?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.18-8.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0117.json"}},{"package":{"name":"kmod-xtables-addons","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/kmod-xtables-addons?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13-14.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0117.json"}},{"package":{"name":"kernel","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/kernel?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.20-2.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0117.json"}},{"package":{"name":"kmod-virtualbox","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/kmod-virtualbox?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.18-18.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0117.json"}},{"package":{"name":"kmod-xtables-addons","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/kmod-xtables-addons?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13-34.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0117.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}