{"id":"MGASA-2021-0588","summary":"Updated kernel packages fix security vulnerabilities","details":"This kernel update is based on upstream 5.15.11 and fixes at least the\nfollowing security issues:\n\nnetdevsim: Zero-initialize memory for new map's value in function\nnsim_bpf_map_alloc (CVE-2021-4135).\n\nPotentially malicious XEN PV backends can cause guest DoS due to unhardened\nfrontends in the guests, even though this ought to have been prevented by\ncontaining them within a driver domain. This update fixes the issue tracked\nas XSA-391: blkfront (CVE-2021-28711), netfront (CVE-2021-28712),\nhvc_xen (CVE-2021-28713).\n\nThe Linux kernel's xen-netback backend driver can be forced by guests to\nqueue arbitrary amounts of network data, finally causing an out of memory\nsituation in the domain the backend is running in (usually dom0). This\nupdate fixes the issues tracked as XSA-392 (CVE-2021-28714, CVE-2021-28715).\n\nIn __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11,\nthere is an out-of-bounds memory access when an inode has an invalid last\nxattr entry (CVE-2021-45469).\n\nrds: memory leak in __rds_conn_create() (CVE-2021-45480).\n\nIn addition to the upstream changes, we also have added the following fixes:\n- ALSA: hda/hdmi: Disable silent stream on GLK\n- arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd\n- ext4: check for inconsistent extents between index and leaf block\n- ext4: check for out-of-order index extents in ext4_valid_extent_entries()\n- ext4: prevent partial update of the extent blocks\n- HID: intel-ish-hid: ipc: Specify no cache snooping on TGL and ADL\n- HID: potential dereference of null pointer\n- iwlwifi: mvm: Increase the scan timeout guard to 30 seconds\n- KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled\n- net: amd-xgbe: Add Support for Yellow Carp Ethernet device\n- net: usb: lan78xx: add Allied Telesis AT29M2-AF\n- netfs: fix parameter of cleanup()\n- NFSD: Fix READDIR buffer overflow\n- PM: sleep: Fix error handling in dpm_prepare()\n- restored legacy NTLM support in cifs (mga#29641)\n- revert: \"rtw88: 8821c: disable the ASPM of RTL8821CE\"\n- rtw88: add quirk to disable pci caps on HP 250 G7 Notebook PC\n- rtw88: Disable PCIe ASPM while doing NAPI poll on 8821CE\n- rtw88: don't check CRC of VHT-SIG-B in 802.11ac signal\n- rtw88: 8822c: update rx settings to prevent potential hw deadlock\n- rtw89: 8852a: correct bit definition of dfs_en\n\nFor other upstream fixes, see the referenced changelogs.\n","modified":"2026-02-04T03:16:27.058746Z","published":"2021-12-29T19:12:56Z","related":["CVE-2021-28711","CVE-2021-28712","CVE-2021-28713","CVE-2021-28714","CVE-2021-28715","CVE-2021-4135","CVE-2021-45469","CVE-2021-45480"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2021-0588.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=29813"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=29641"},{"type":"REPORT","url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.11"},{"type":"REPORT","url":"https://xenbits.xen.org/xsa/advisory-391.html"},{"type":"REPORT","url":"https://xenbits.xen.org/xsa/advisory-392.html"}],"affected":[{"package":{"name":"kernel","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/kernel?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.11-3.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0588.json"}},{"package":{"name":"kmod-virtualbox","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/kmod-virtualbox?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.30-1.7.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0588.json"}},{"package":{"name":"kmod-xtables-addons","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/kmod-xtables-addons?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-1.41.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0588.json"}}],"schema_version":"1.7.3","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}