{"id":"SUSE-SU-2021:2325-1","summary":"Security update for the Linux Kernel","details":"The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-3573: Fixed an UAF vulnerability in function that can allow attackers to corrupt kernel heaps and adopt further exploitations. (bsc#1186666)\n- CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (bsc#1187601)\n- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187595)\n- CVE-2021-33624: Fixed a bug which allows unprivileged BPF program to leak the contents of arbitrary kernel memory (and therefore, of all physical memory) via a side-channel. (bsc#1187554)\n- CVE-2021-34693: Fixed a bug in net/can/bcm.c which could allow local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. (bsc#1187452)\n- CVE-2021-0129: Fixed improper access control in BlueZ that may have allowed an authenticated user to potentially enable information disclosure via adjacent access (bnc#1186463).\n- CVE-2020-36385: Fixed a use-after-free via the ctx_list in some ucma_migrate_id situations where ucma_close is called (bnc#1187050).\n- CVE-2020-26558: Fixed Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 (bnc#1179610, bnc#1186463).\n- CVE-2020-36386: Fixed an out-of-bounds read issue in hci_extended_inquiry_result_evt (bnc#1187038).\n\nThe following non-security bugs were fixed:\n\n- acpica: Clean up context mutex during object deletion (git-fixes).\n- alsa: hda/cirrus: Set Initial DMIC volume to -26 dB (git-fixes).\n- alsa: hda: Fix for mute key LED for HP Pavilion 15-CK0xx (git-fixes).\n- alsa: timer: Fix master timer notification (git-fixes).\n- alx: Fix an error handling path in 'alx_probe()' (git-fixes).\n- arch: Add arch-dependent support markers in supported.conf (bsc#1186672)\n- arch: Add the support for kernel-FLAVOR-optional subpackage (jsc#SLE-11796)\n- ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet (git-fixes).\n- ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet (git-fixes).\n- ASoC: max98088: fix ni clock divider calculation (git-fixes).\n- ASoC: rt5659: Fix the lost powers for the HDA header (git-fixes).\n- ASoC: sti-sas: add missing MODULE_DEVICE_TABLE (git-fixes).\n- ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd() (git-fixes).\n- batman-adv: Avoid WARN_ON timing related checks (git-fixes).\n- be2net: Fix an error handling path in 'be_probe()' (git-fixes).\n- blk-settings: align max_sectors on 'logical_block_size' boundary (bsc#1185195).\n- block: Discard page cache of zone reset target range (bsc#1187402).\n- block: return the correct bvec when checking for gaps (bsc#1187143).\n- block: return the correct bvec when checking for gaps (bsc#1187144).\n- bluetooth: fix the erroneous flush_work() order (git-fixes).\n- bluetooth: use correct lock to prevent UAF of hdev object (git-fixes).\n- bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path (jsc#SLE-8371 bsc#1153274).\n- bnxt_en: Fix TQM fastpath ring backing store computation (jsc#SLE-8371 bsc#1153274).\n- bnxt_en: Rediscover PHY capabilities after firmware reset (jsc#SLE-8371 bsc#1153274).\n- bpfilter: Specify the log level for the kmsg message (bsc#1155518).\n- brcmfmac: properly check for bus register errors (git-fixes).\n- btrfs: open device without device_list_mutex (bsc#1176771).\n- bus: ti-sysc: Fix flakey idling of uarts and stop using swsup_sidle_act (git-fixes).\n- can: mcba_usb: fix memory leak in mcba_usb (git-fixes).\n- ceph: must hold snap_rwsem when filling inode for async create (bsc#1187927).\n- cfg80211: avoid double free of PMSR request (git-fixes).\n- cfg80211: make certificate generation more robust (git-fixes).\n- cgroup1: do not allow '\\n' in renaming (bsc#1187972).\n- char: hpet: add checks after calling ioremap (git-fixes).\n- CPU: Startup failed when SNC (sub-numa cluster) is enabled with 3 NIC add-on cards installed (bsc#1187263).\n- cxgb4: avoid accessing registers when clearing filters (git-fixes).\n- cxgb4: avoid link re-train during TC-MQPRIO configuration (jsc#SLE-8389).\n- cxgb4: fix wrong shift (git-fixes).\n- dax: Add a wakeup mode parameter to put_unlocked_entry() (bsc#1187411).\n- dax: Add an enum for specifying dax wakup mode (bsc#1187411).\n- dax: fix ENOMEM handling in grab_mapping_entry() (bsc#1184212).\n- dax: Wake up all waiters after invalidating dax entry (bsc#1187411).\n- dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM (git-fixes).\n- dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc (git-fixes).\n- dmaengine: qcom_hidma: comment platform_driver_register call (git-fixes).\n- dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM (git-fixes).\n- dmaengine: stedma40: add missing iounmap() on error in d40_probe() (git-fixes).\n- drm/amd/amdgpu: fix a potential deadlock in gpu reset (git-fixes).\n- drm/amd/amdgpu: fix refcount leak (git-fixes).\n- drm/amd/display: Allow bandwidth validation for 0 streams (git-fixes).\n- drm/amd/display: Disconnect non-DP with no EDID (git-fixes).\n- drm/amdgpu: Fix a use-after-free (git-fixes).\n- drm/amdgpu: make sure we unpin the UVD BO (git-fixes).\n- drm/tegra: sor: Do not leak runtime PM reference (git-fixes).\n- drm: Fix use-after-free read in drm_getunique() (git-fixes).\n- drm: Lock pointer access in drm_master_release() (git-fixes).\n- dt-bindings: reset: meson8b: fix duplicate reset IDs (git-fixes).\n- efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared (git-fixes).\n- efi: cper: fix snprintf() use in cper_dimm_err_location() (git-fixes).\n- ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (bsc#1187408).\n- ext4: fix check to prevent false positive report of incorrect used inodes (bsc#1187404).\n- ext4: fix error code in ext4_commit_super (bsc#1187407).\n- ext4: fix memory leak in ext4_fill_super (bsc#1187409).\n- FCOE: fcoe_wwn_from_mac kABI fix (bsc#1187886).\n- fs/nfs: Use fatal_signal_pending instead of signal_pending (git-fixes).\n- fs: fix reporting supported extra file attributes for statx() (bsc#1187410).\n- ftrace: Do not blindly read the ip address in ftrace_bug() (git-fixes).\n- ftrace: Free the trampoline when ftrace_startup() fails (git-fixes).\n- fuse: BUG_ON correction in fuse_dev_splice_write() (bsc#1187356).\n- gpio: cadence: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- gpu: Enable CONFIG_PCI_PF_STUB for Nvidia Ampere vGPU support (jsc#SLE-17882 jsc#ECO-3691)\n- gve: Add NULL pointer checks when freeing irqs (git-fixes).\n- gve: Correct SKB queue index validation (git-fixes).\n- gve: Upgrade memory barrier in poll routine (git-fixes).\n- HID: Add BUS_VIRTUAL to hid_connect logging (git-fixes).\n- HID: gt683r: add missing MODULE_DEVICE_TABLE (git-fixes).\n- HID: hid-input: add mapping for emoji picker key (git-fixes).\n- HID: hid-sensor-hub: Return error for hid_set_field() failure (git-fixes).\n- HID: i2c-hid: fix format string mismatch (git-fixes).\n- HID: i2c-hid: Skip ELAN power-on command after reset (git-fixes).\n- HID: magicmouse: fix NULL-deref on disconnect (git-fixes).\n- HID: multitouch: require Finger field to mark Win8 reports as MT (git-fixes).\n- HID: pidff: fix error return code in hid_pidff_init() (git-fixes).\n- HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65 (git-fixes).\n- HID: usbhid: fix info leak in hid_submit_ctrl (git-fixes).\n- HID: usbhid: Fix race between usbhid_close() and usbhid_stop() (git-fixes).\n- hwmon: (dell-smm-hwmon) Fix index values (git-fixes).\n- hwmon: (scpi-hwmon) shows the negative temperature properly (git-fixes).\n- i2c: mpc: Make use of i2c_recover_bus() (git-fixes).\n- i2c: qcom-geni: Suspend and resume the bus during SYSTEM_SLEEP_PM ops (git-fixes).\n- ice: add ndo_bpf callback for safe mode netdev ops (jsc#SLE-7926).\n- ice: Allow all LLDP packets from PF to Tx (jsc#SLE-7926).\n- ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared (git-fixes).\n- isdn: mISDN: correctly handle ph_info allocation failure in hfcsusb_ph_info (git-fixes).\n- isdn: mISDN: netjet: Fix crash in nj_probe: (git-fixes).\n- isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io (git-fixes).\n- ixgbe: fix large MTU request from VF (git-fixes).\n- kABI workaround for struct lis3lv02d change (git-fixes).\n- kernel-binary.spec.in: Add Supplements: for -extra package on Leap kernel-$flavor-extra should supplement kernel-$flavor on Leap, like it does on SLED, and like the kernel-$flavor-optional package does.\n- kernel-binary.spec.in: build-id check requires elfutils.\n- kernel-binary.spec.in: Regenerate makefile when not using mkmakefile.\n- kernel-binary.spec: Only use mkmakefile when it exists Linux 5.13 no longer had a mkmakefile script\n- kernel: kexec_file: fix error return code of kexec_calculate_store_digests() (git-fixes).\n- kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (bsc#1187867).\n- kthread_worker: split code for canceling the delayed work timer (bsc#1187867).\n- kyber: fix out of bounds access when preempted (bsc#1187403).\n- lib: vdso: Remove CROSS_COMPILE_COMPAT_VDSO (bsc#1164648,jsc#SLE-11493).\n- libertas: register sysfs groups properly (git-fixes).\n- locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal (git-fixes).\n- md: Fix missing unused status line of /proc/mdstat (git-fixes).\n- media: dvb: Add check on sp8870_readreg return (git-fixes).\n- media: dvb: Add check on sp8870_readreg return (git-fixes).\n- media: gspca: mt9m111: Check write_bridge for timeout (git-fixes).\n- media: gspca: mt9m111: Check write_bridge for timeout (git-fixes).\n- media: gspca: properly check for errors in po1030_probe() (git-fixes).\n- media: gspca: properly check for errors in po1030_probe() (git-fixes).\n- media: mtk-mdp: Check return value of of_clk_get (git-fixes).\n- media: mtk-mdp: Fix a refcounting bug on error in init (git-fixes).\n- media: s5p-g2d: Fix a memory leak in an error handling path in 'g2d_probe()' (git-fixes).\n- mei: request autosuspend after sending rx flow control (git-fixes).\n- mmc: meson-gx: use memcpy_to/fromio for dram-access-quirk (git-fixes).\n- module: limit enabling module.sig_enforce (git-fixes).\n- net/mlx4: Fix EEPROM dump support (git-fixes).\n- net/mlx5: Consider RoCE cap before init RDMA resources (git-fixes).\n- net/mlx5: DR, Create multi-destination flow table with level less than 64 (jsc#SLE-8464).\n- net/mlx5: Fix PBMC register mapping (git-fixes).\n- net/mlx5: Fix placement of log_max_flow_counter (git-fixes).\n- net/mlx5: Fix sleep while atomic in mlx5_eswitch_get_vepa (git-fixes).\n- net/mlx5e: Block offload of outer header csum for UDP tunnels (git-fixes).\n- net/mlx5e: Fix multipath lag activation (git-fixes).\n- net/mlx5e: Fix nullptr in add_vlan_push_action() (git-fixes).\n- net/mlx5e: Fix page reclaim for dead peer hairpin (git-fixes).\n- net/mlx5e: Remove dependency in IPsec initialization flows (git-fixes).\n- net/nfc/rawsock.c: fix a permission check bug (git-fixes).\n- net/sched: act_ct: handle DNAT tuple collision (bsc#1154353).\n- net/x25: Return the correct errno code (git-fixes).\n- net: bnx2: Fix error return code in bnx2_init_board() (git-fixes).\n- net: fix iteration for sctp transport seq_files (git-fixes).\n- net: hns3: Limiting the scope of vector_ring_chain variable (git-fixes).\n- net: hns3: put off calling register_netdev() until client initialize complete (bsc#1154353).\n- net: mvpp2: add mvpp2_phylink_to_port() helper (bsc#1187171).\n- netxen_nic: Fix an error handling path in 'netxen_nic_probe()' (git-fixes).\n- nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (git-fixes).\n- NFC: SUSE specific brutal fix for runtime PM (bsc#1185589).\n- NFS: Deal correctly with attribute generation counter overflow (git-fixes).\n- NFS: Do not corrupt the value of pg_bytes_written in nfs_do_recoalesce() (git-fixes).\n- NFS: Do not discard pNFS layout segments that are marked for return (git-fixes).\n- NFS: Do not gratuitously clear the inode cache when lookup failed (git-fixes).\n- NFS: Do not revalidate the directory permissions on a lookup failure (git-fixes).\n- NFS: Fix a potential NULL dereference in nfs_get_client() (git-fixes).\n- NFS: fix an incorrect limit in filelayout_decode_layout() (git-fixes).\n- NFS: Fix an Oopsable condition in __nfs_pageio_add_request() (git-fixes).\n- NFS: Fix use-after-free in nfs4_init_client() (git-fixes).\n- nfsd: register pernet ops last, unregister first (git-fixes).\n- NFSD: Repair misuse of sv_lock in 5.10.16-rt30 (git-fixes).\n- NFSv4.2 fix handling of sr_eof in SEEK's reply (git-fixes).\n- NFSv4.2: Always flush out writes in nfs42_proc_fallocate() (git-fixes).\n- NFSv4.2: fix return value of _nfs4_get_security_label() (git-fixes).\n- NFSv4: Do not discard segments marked for return in _pnfs_return_layout() (git-fixes).\n- NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() (git-fixes).\n- NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode() (git-fixes).\n- NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config (git-fixes).\n- ocfs2: fix data corruption by fallocate (bsc#1187412).\n- PCI/LINK: Remove bandwidth notification (bsc#1183712).\n- PCI: aardvark: Do not rely on jiffies while holding spinlock (git-fixes).\n- PCI: aardvark: Fix kernel panic during PIO transfer (git-fixes).\n- PCI: Add ACS quirk for Broadcom BCM57414 NIC (git-fixes).\n- PCI: Mark some NVIDIA GPUs to avoid bus reset (git-fixes).\n- PCI: Mark TI C667X to avoid bus reset (git-fixes).\n- PCI: Work around Huawei Intelligent NIC VF FLR erratum (git-fixes).\n- perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 (bsc#1184685).\n- pid: take a reference when initializing `cad_pid` (bsc#1152489).\n- platform/x86: hp-wireless: add AMD's hardware id to the supported list (git-fixes).\n- platform/x86: hp_accel: Avoid invoking _INI to speed up resume (git-fixes).\n- platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI (git-fixes).\n- platform/x86: touchscreen_dmi: Add info for the Mediacom Winpad 7.0 W700 tablet (git-fixes).\n- PM: sleep: Add pm_debug_messages kernel command line option (bsc#1186752).\n- pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() (git-fixes).\n- pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process() (git-fixes).\n- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470 bsc#1185486).\n- qlcnic: Fix an error handling path in 'qlcnic_probe()' (git-fixes).\n- radeon: use memcpy_to/fromio for UVD fw upload (git-fixes).\n- regulator: bd70528: Fix off-by-one for buck123 .n_voltages setting (git-fixes).\n- regulator: core: resolve supply for boot-on/always-on regulators (git-fixes).\n- regulator: max77620: Use device_set_of_node_from_dev() (git-fixes).\n- Revert 'ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()' (git-fixes).\n- Revert 'brcmfmac: add a check for the status of usb_register' (git-fixes).\n- Revert 'char: hpet: fix a missing check of ioremap' (git-fixes).\n- Revert 'char: hpet: fix a missing check of ioremap' (git-fixes).\n- Revert 'dmaengine: qcom_hidma: Check for driver register failure' (git-fixes).\n- Revert 'ecryptfs: replace BUG_ON with error handling code' (bsc#1187413).\n- Revert 'ibmvnic: simplify reset_long_term_buff function' (bsc#1186206 ltc#191041).\n- Revert 'isdn: mISDN: Fix potential NULL pointer dereference of kzalloc' (git-fixes).\n- Revert 'isdn: mISDNinfineon: fix potential NULL pointer dereference' (git-fixes).\n- Revert 'libertas: add checks for the return value of sysfs_create_group' (git-fixes).\n- Revert 'media: dvb: Add check on sp8870_readreg' (git-fixes).\n- Revert 'media: dvb: Add check on sp8870_readreg' (git-fixes).\n- Revert 'media: gspca: Check the return value of write_bridge for timeout' (git-fixes).\n- Revert 'media: gspca: Check the return value of write_bridge for timeout' (git-fixes).\n- Revert 'media: gspca: mt9m111: Check write_bridge for timeout' (git-fixes).\n- Revert 'media: gspca: mt9m111: Check write_bridge for timeout' (git-fixes).\n- Revert 'media: usb: gspca: add a missed check for goto_low_power' (git-fixes).\n- Revert 'net: liquidio: fix a NULL pointer dereference' (git-fixes).\n- Revert 'PCI: PM: Do not read power state in pci_enable_device_flags()' (git-fixes).\n- Revert 'qlcnic: Avoid potential NULL pointer dereference' (git-fixes).\n- Revert 'scsi: core: run queue if SCSI device queue isn't ready and queue is idle' (bsc#1186949).\n- Revert 'serial: max310x: pass return value of spi_register_driver' (git-fixes).\n- Revert 'video: hgafb: fix potential NULL pointer dereference' (git-fixes).\n- Revert 'video: imsttfb: fix potential NULL pointer dereferences' (bsc#1152489)\n- rpm/kernel-binary.spec.in: Correct Supplements in optional subpkg (jsc#SLE-11796)\n- rpm/kernel-binary.spec.in: Fix handling of +arch marker (bsc#1186672)\n- rpm/split-modules: Avoid errors even if Module.* are not present\n- s390/stack: fix possible register corruption with stack switch helper (bsc#1185677).\n- sched/debug: Fix cgroup_path[] serialization (git-fixes)\n- sched/fair: Keep load_avg and load_sum synced (git-fixes)\n- scsi: aacraid: Fix an oops in error handling (bsc#1187072).\n- scsi: aacraid: Remove erroneous fallthrough annotation (bsc#1186950).\n- scsi: aacraid: Use memdup_user() as a cleanup (bsc#1186951).\n- scsi: acornscsi: Fix an error handling path in acornscsi_probe() (bsc#1186952).\n- scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs() (bsc#1186953).\n- scsi: be2iscsi: Revert 'Fix a theoretical leak in beiscsi_create_eqs()' (bsc#1187067).\n- scsi: bfa: Fix error return in bfad_pci_init() (bsc#1186954).\n- scsi: bnx2fc: Fix Kconfig warning and CNIC build errors (bsc#1186955).\n- scsi: bnx2i: Requires MMU (bsc#1186956).\n- scsi: core: Fix race between handling STS_RESOURCE and completion (bsc#1187883).\n- scsi: csiostor: Fix wrong return value in csio_hw_prep_fw() (bsc#1186957).\n- scsi: cumana_2: Fix different dev_id between request_irq() and free_irq() (bsc#1186958).\n- scsi: cxgb3i: Fix some leaks in init_act_open() (bsc#1186959).\n- scsi: cxgb4i: Fix TLS dependency (bsc#1186960).\n- scsi: eesox: Fix different dev_id between request_irq() and free_irq() (bsc#1186961).\n- scsi: fcoe: Fix mismatched fcoe_wwn_from_mac declaration (bsc#1187886).\n- scsi: fnic: Fix error return code in fnic_probe() (bsc#1186962).\n- scsi: hisi_sas: Fix IRQ checks (bsc#1186963).\n- scsi: hisi_sas: Remove preemptible() (bsc#1186964).\n- scsi: jazz_esp: Add IRQ check (bsc#1186965).\n- scsi: libfc: Fix enum-conversion warning (bsc#1186966).\n- scsi: libsas: Fix error path in sas_notify_lldd_dev_found() (bsc#1186967).\n- scsi: libsas: Reset num_scatter if libata marks qc as NODATA (bsc#1187068).\n- scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA (bsc#1186968).\n- scsi: lpfc: Fix ancient double free (bsc#1186969).\n- scsi: lpfc: Fix failure to transmit ABTS on FC link (git-fixes).\n- scsi: megaraid_sas: Check user-provided offsets (bsc#1186970).\n- scsi: megaraid_sas: Clear affinity hint (bsc#1186971).\n- scsi: megaraid_sas: Do not call disable_irq from process IRQ poll (bsc#1186972).\n- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (bsc#1186973).\n- scsi: megaraid_sas: Remove undefined ENABLE_IRQ_POLL macro (bsc#1186974).\n- scsi: mesh: Fix panic after host or bus reset (bsc#1186976).\n- scsi: mpt3sas: Do not use GFP_KERNEL in atomic context (bsc#1186977).\n- scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() (bsc#1186978).\n- scsi: mpt3sas: Fix ioctl timeout (bsc#1186979).\n- scsi: myrs: Fix a double free in myrs_cleanup() (bsc#1186980).\n- scsi: pm80xx: Fix error return in pm8001_pci_probe() (bsc#1186981).\n- scsi: powertec: Fix different dev_id between request_irq() and free_irq() (bsc#1186982).\n- scsi: qedi: Check for buffer overflow in qedi_set_path() (bsc#1186983).\n- scsi: qedi: Fix error return code of qedi_alloc_global_queues() (bsc#1186984).\n- scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (bsc#1186985).\n- scsi: qla2xxx: Prevent PRLI in target mode (git-fixes).\n- scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()' (bsc#1186986).\n- scsi: qla4xxx: Remove in_interrupt() (bsc#1186987).\n- scsi: scsi_debug: Add check for sdebug_max_queue during module init (bsc#1186988).\n- scsi: scsi_dh_alua: Retry RTPG on a different path after failure (bsc#1174978 bsc#1185701).\n- scsi: sd: Fix Opal support (bsc#1186989).\n- scsi: sni_53c710: Add IRQ check (bsc#1186990).\n- scsi: sun3x_esp: Add IRQ check (bsc#1186991).\n- scsi: ufs-qcom: Fix scheduling while atomic issue (bsc#1187002).\n- scsi: ufs: Add quirk to disallow reset of interrupt aggregation (bsc#1186992).\n- scsi: ufs: Add quirk to enable host controller without hce (bsc#1186993).\n- scsi: ufs: Add quirk to fix abnormal ocs fatal error (bsc#1186994).\n- scsi: ufs: Add quirk to fix mishandling utrlclr/utmrlclr (bsc#1186995).\n- scsi: ufs: core: Narrow down fast path in system suspend path (bsc#1186996).\n- scsi: ufs: Do not update urgent bkops level when toggling auto bkops (bsc#1186997).\n- scsi: ufs: Fix imprecise load calculation in devfreq window (bsc#1187795).\n- SCSI: ufs: fix ktime_t kabi change (bsc#1187795).\n- scsi: ufs: Fix race between shutdown and runtime resume flow (bsc#1186998).\n- scsi: ufs: Introduce UFSHCD_QUIRK_PRDT_BYTE_GRAN quirk (bsc#1187000).\n- scsi: ufs: Make ufshcd_print_trs() consider UFSHCD_QUIRK_PRDT_BYTE_GRAN (bsc#1187069).\n- scsi: ufs: Properly release resources if a task is aborted successfully (bsc#1187001).\n- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).\n- scsi: ufs: ufshcd-pltfrm: Fix deferred probing (bsc#1187003).\n- scsi: ufshcd: use an enum for quirks (bsc#1186999).\n- serial: max310x: unregister uart driver in case of failure and abort (git-fixes).\n- serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' (git-fixes).\n- spi: spi-nxp-fspi: move the register operation after the clock enable (git-fixes).\n- spi: sprd: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- spi: stm32-qspi: Always wait BUSY bit to be cleared in stm32_qspi_wait_cmd() (git-fixes).\n- staging: rtl8723bs: Fix uninitialized variables (git-fixes).\n- sunrpc: fix refcount leak for rpc auth modules (git-fixes).\n- SUNRPC: Handle major timeout in xprt_adjust_timeout() (git-fixes).\n- SUNRPC: Move fault injection call sites (git-fixes).\n- SUNRPC: Set memalloc_nofs_save() for sync tasks (git-fixes).\n- svcrdma: disable timeouts on rdma backchannel (git-fixes).\n- thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID (git-fixes).\n- tpm: fix error return code in tpm2_get_cc_attrs_tbl() (git-fixes).\n- tracing: Correct the length check which causes memory corruption (git-fixes).\n- tracing: Do no increment trace_clock_global() by one (git-fixes).\n- tracing: Do not stop recording cmdlines when tracing is off (git-fixes).\n- tracing: Do not stop recording comms if the trace file is being read (git-fixes).\n- tracing: Restructure trace_clock_global() to never block (git-fixes).\n- ttyprintk: Add TTY hangup callback (git-fixes).\n- usb: core: hub: Disable autosuspend for Cypress CY7C65632 (git-fixes).\n- usb: core: reduce power-on-good delay time of root hub (git-fixes).\n- usb: dwc3: core: fix kernel panic when do reboot (git-fixes).\n- usb: dwc3: core: fix kernel panic when do reboot (git-fixes).\n- usb: dwc3: debugfs: Add and remove endpoint dirs dynamically (git-fixes).\n- usb: dwc3: ep0: fix NULL pointer exception (git-fixes).\n- USB: f_ncm: ncm_bitrate (speed) is unsigned (git-fixes).\n- usb: f_ncm: only first packet of aggregate needs to start timer (git-fixes).\n- usb: f_ncm: only first packet of aggregate needs to start timer (git-fixes).\n- usb: fix various gadget panics on 10gbps cabling (git-fixes).\n- usb: fix various gadget panics on 10gbps cabling (git-fixes).\n- usb: fix various gadgets null ptr deref on 10gbps cabling (git-fixes).\n- usb: gadget: eem: fix wrong eem header operation (git-fixes).\n- usb: gadget: eem: fix wrong eem header operation (git-fixes).\n- usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind (git-fixes).\n- usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind (git-fixes).\n- usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling (git-fixes).\n- usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms (git-fixes).\n- USB: serial: cp210x: fix alternate function for CP2102N QFN20 (git-fixes).\n- USB: serial: ftdi_sio: add IDs for IDS GmbH Products (git-fixes).\n- USB: serial: ftdi_sio: add NovaTech OrionMX product ID (git-fixes).\n- USB: serial: ftdi_sio: add NovaTech OrionMX product ID (git-fixes).\n- USB: serial: omninet: add device id for Zyxel Omni 56K Plus (git-fixes).\n- USB: serial: omninet: add device id for Zyxel Omni 56K Plus (git-fixes).\n- USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011 (git-fixes).\n- USB: serial: pl2303: add device id for ADLINK ND-6530 GC (git-fixes).\n- USB: serial: quatech2: fix control-request directions (git-fixes).\n- USB: serial: ti_usb_3410_5052: add startech.com device id (git-fixes).\n- usb: typec: mux: Fix copy-paste mistake in typec_mux_match (git-fixes).\n- usb: typec: mux: Fix matching with typec_altmode_desc (git-fixes).\n- usb: typec: tcpm: Use LE to CPU conversion when accessing msg-\u003eheader (git-fixes).\n- usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path (git-fixes).\n- usb: typec: wcove: Use LE to CPU conversion when accessing msg-\u003eheader (git-fixes).\n- USB: usbfs: Do not WARN about excessively large memory allocations (git-fixes).\n- vfio/pci: Fix error return code in vfio_ecap_init() (git-fixes).\n- vfio/pci: zap_vma_ptes() needs MMU (git-fixes).\n- vfio/platform: fix module_put call in error flow (git-fixes).\n- video: hgafb: correctly handle card detect failure during probe (git-fixes).\n- video: hgafb: fix potential NULL pointer dereference (git-fixes).\n- vmlinux.lds.h: Avoid orphan section with !SMP (git-fixes).\n- vrf: fix maximum MTU (git-fixes).\n- vsock/vmci: log once the failed queue pair allocation (git-fixes).\n- wireguard: allowedips: initialize list head in selftest (git-fixes).\n- wireguard: do not use -O3 (git-fixes).\n- wireguard: peer: allocate in kmem_cache (git-fixes).\n- wireguard: peer: put frequently used members above cache lines (git-fixes).\n- wireguard: queueing: get rid of per-peer ring buffers (git-fixes).\n- wireguard: selftests: make sure rp_filter is disabled on vethc (git-fixes).\n- wireguard: selftests: remove old conntrack kconfig value (git-fixes).\n- wireguard: use synchronize_net rather than synchronize_rcu (git-fixes).\n- x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing (bsc#1152489).\n- x86/fault: Do not send SIGSEGV twice on SEGV_PKUERR (bsc#1152489).\n- x86/pkru: Write hardware init value to PKRU when xstate is init (bsc#1152489).\n- x86/process: Check PF_KTHREAD and not current-\u003emm for kernel threads (bsc#1152489).\n- x86: fix seq_file iteration for pat.c (git-fixes).\n- xen-blkback: fix compatibility bug with single page rings (git-fixes).\n- xen-pciback: reconfigure also from backend watch handler (git-fixes).\n- xen-pciback: redo VF placement in the virtual topology (git-fixes).\n- xen/evtchn: Change irq_info lock to raw_spinlock_t (git-fixes).\n- xfrm: policy: Read seqcount outside of rcu-read side in xfrm_policy_lookup_bytype (bsc#1185675).\n- xprtrdma: Avoid Receive Queue wrapping (git-fixes).\n- xprtrdma: rpcrdma_mr_pop() already does list_del_init() (git-fixes).\n","modified":"2026-02-04T04:00:23.261086Z","published":"2021-07-14T15:07:41Z","related":["CVE-2020-26558","CVE-2020-36385","CVE-2020-36386","CVE-2021-0129","CVE-2021-0512","CVE-2021-0605","CVE-2021-33624","CVE-2021-34693","CVE-2021-3573"],"upstream":["CVE-2020-26558","CVE-2020-36385","CVE-2020-36386","CVE-2021-0129","CVE-2021-0512","CVE-2021-0605","CVE-2021-33624","CVE-2021-34693","CVE-2021-3573"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212325-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1152489"},{"type":"REPORT","url":"https://bugzilla.suse.com/1153274"},{"type":"REPORT","url":"https://bugzilla.suse.com/1154353"},{"type":"REPORT","url":"https://bugzilla.suse.com/1155518"},{"type":"REPORT","url":"https://bugzilla.suse.com/1164648"},{"type":"REPORT","url":"https://bugzilla.suse.com/1174978"},{"type":"REPORT","url":"https://bugzilla.suse.com/1176771"},{"type":"REPORT","url":"https://bugzilla.suse.com/1179610"},{"type":"REPORT","url":"https://bugzilla.suse.com/1182470"},{"type":"REPORT","url":"https://bugzilla.suse.com/1183712"},{"type":"REPORT","url":"https://bugzilla.suse.com/1184212"},{"type":"REPORT","url":"https://bugzilla.suse.com/1184685"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185195"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185486"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185589"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185675"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185677"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185701"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186206"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186463"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186666"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186672"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186752"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186949"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186950"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186951"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186952"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186953"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186954"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186955"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186956"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186957"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186958"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186959"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186960"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186961"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186962"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186963"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186964"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186965"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186966"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186967"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186968"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186969"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186970"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186971"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186972"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186973"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186974"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186976"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186977"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186978"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186979"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186980"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186981"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186982"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186983"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186984"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186985"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186986"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186987"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186988"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186989"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186990"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186991"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186992"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186993"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186994"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186995"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186996"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186997"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186998"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186999"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187000"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187001"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187002"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187003"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187038"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187050"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187067"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187068"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187069"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187072"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187143"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187144"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187171"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187263"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187356"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187402"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187403"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187404"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187407"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187408"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187409"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187410"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187411"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187412"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187413"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187452"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187554"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187595"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187601"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187795"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187867"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187883"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187886"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187927"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187972"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187980"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-26558"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-36385"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-36386"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-0129"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-0512"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-0605"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-33624"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-34693"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-3573"}],"affected":[{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-devel":"5.3.18-24.70.1","kernel-devel":"5.3.18-24.70.1","kernel-preempt":"5.3.18-24.70.1","kernel-default":"5.3.18-24.70.1","kernel-default-base":"5.3.18-24.70.1.9.32.1","kernel-macros":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-default-base","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","purl":"pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1.9.32.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-devel":"5.3.18-24.70.1","kernel-devel":"5.3.18-24.70.1","kernel-preempt":"5.3.18-24.70.1","kernel-default":"5.3.18-24.70.1","kernel-default-base":"5.3.18-24.70.1.9.32.1","kernel-macros":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-preempt","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","purl":"pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-devel":"5.3.18-24.70.1","kernel-devel":"5.3.18-24.70.1","kernel-preempt":"5.3.18-24.70.1","kernel-default":"5.3.18-24.70.1","kernel-default-base":"5.3.18-24.70.1.9.32.1","kernel-macros":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-devel":"5.3.18-24.70.1","kernel-devel":"5.3.18-24.70.1","kernel-preempt":"5.3.18-24.70.1","kernel-default":"5.3.18-24.70.1","kernel-default-base":"5.3.18-24.70.1.9.32.1","kernel-macros":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-docs","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","purl":"pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-source":"5.3.18-24.70.1","kernel-obs-build":"5.3.18-24.70.1","kernel-docs":"5.3.18-24.70.1","kernel-syms":"5.3.18-24.70.1","kernel-preempt-devel":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-obs-build","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","purl":"pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-source":"5.3.18-24.70.1","kernel-obs-build":"5.3.18-24.70.1","kernel-docs":"5.3.18-24.70.1","kernel-syms":"5.3.18-24.70.1","kernel-preempt-devel":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-preempt","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","purl":"pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-source":"5.3.18-24.70.1","kernel-obs-build":"5.3.18-24.70.1","kernel-docs":"5.3.18-24.70.1","kernel-syms":"5.3.18-24.70.1","kernel-preempt-devel":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-source":"5.3.18-24.70.1","kernel-obs-build":"5.3.18-24.70.1","kernel-docs":"5.3.18-24.70.1","kernel-syms":"5.3.18-24.70.1","kernel-preempt-devel":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-source":"5.3.18-24.70.1","kernel-obs-build":"5.3.18-24.70.1","kernel-docs":"5.3.18-24.70.1","kernel-syms":"5.3.18-24.70.1","kernel-preempt-devel":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP2","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"reiserfs-kmp-default":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP2","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-livepatch":"5.3.18-24.70.1","kernel-default-livepatch-devel":"5.3.18-24.70.1","kernel-livepatch-5_3_18-24_70-default":"1-5.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-livepatch-SLE15-SP2_Update_16","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP2","purl":"pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_16&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-5.3.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-livepatch":"5.3.18-24.70.1","kernel-default-livepatch-devel":"5.3.18-24.70.1","kernel-livepatch-5_3_18-24_70-default":"1-5.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"ocfs2-kmp-default":"5.3.18-24.70.1","dlm-kmp-default":"5.3.18-24.70.1","gfs2-kmp-default":"5.3.18-24.70.1","cluster-md-kmp-default":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-preempt-extra":"5.3.18-24.70.1","kernel-default-extra":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-preempt","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","purl":"pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-preempt-extra":"5.3.18-24.70.1","kernel-default-extra":"5.3.18-24.70.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Micro 5.0","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"5.3.18-24.70.1","kernel-default-base":"5.3.18-24.70.1.9.32.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}},{"package":{"name":"kernel-default-base","ecosystem":"SUSE:Linux Enterprise Micro 5.0","purl":"pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-24.70.1.9.32.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"5.3.18-24.70.1","kernel-default-base":"5.3.18-24.70.1.9.32.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:2325-1.json"}}],"schema_version":"1.7.3"}