CVE-2021-4159 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-4159 Interim 1 42 2023-07-27T23:43:33Z current 2022-02-01T02:12:21Z 2023-07-27T23:43:33Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-4159 A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2022-July/011574.html E-Mail link for SUSE-IU-2022:814-1 https://lists.suse.com/pipermail/sle-security-updates/2022-July/011575.html E-Mail link for SUSE-IU-2022:817-1 https://lists.suse.com/pipermail/sle-security-updates/2022-July/011573.html E-Mail link for SUSE-IU-2022:836-1 https://lists.suse.com/pipermail/sle-updates/2022-February/021670.html E-Mail link for SUSE-SU-2022:0363-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/K4ZJSATCJ2GMGCX6RSG2TU2YU4DDOMVQ/ E-Mail link for openSUSE-SU-2022:0363-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 Image SLES15-SP3-HPC-Azure SUSE Linux Enterprise Module for Public Cloud 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 openSUSE Leap 15.3 cluster-md-kmp-azure-5.3.18-150300.38.40.4 dlm-kmp-azure-5.3.18-150300.38.40.4 gfs2-kmp-azure-5.3.18-150300.38.40.4 kernel-azure-5.3.18-150300.38.40.4 kernel-azure-devel-5.3.18-150300.38.40.4 kernel-azure-extra-5.3.18-150300.38.40.4 kernel-azure-livepatch-devel-5.3.18-150300.38.40.4 kernel-azure-optional-5.3.18-150300.38.40.4 kernel-default kernel-default-base kernel-default-devel kernel-default-kgraft kernel-default-man kernel-devel kernel-devel-azure kernel-devel-azure-5.3.18-150300.38.40.4 kernel-macros kernel-source kernel-source-azure kernel-source-azure-5.3.18-150300.38.40.4 kernel-syms-azure-5.3.18-150300.38.40.1 kselftests-kmp-azure-5.3.18-150300.38.40.4 ocfs2-kmp-azure-5.3.18-150300.38.40.4 reiserfs-kmp-azure-5.3.18-150300.38.40.4 kernel-azure-5.3.18-150300.38.40.4 as a component of Image SLES15-SP3-HPC-Azure kernel-azure-5.3.18-150300.38.40.4 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP3 kernel-azure-devel-5.3.18-150300.38.40.4 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP3 kernel-devel-azure-5.3.18-150300.38.40.4 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP3 kernel-source-azure-5.3.18-150300.38.40.4 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP3 kernel-syms-azure-5.3.18-150300.38.40.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP3 cluster-md-kmp-azure-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 dlm-kmp-azure-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 gfs2-kmp-azure-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 kernel-azure-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 kernel-azure-devel-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 kernel-azure-extra-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 kernel-azure-livepatch-devel-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 kernel-azure-optional-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 kernel-devel-azure-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 kernel-source-azure-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 kernel-syms-azure-5.3.18-150300.38.40.1 as a component of openSUSE Leap 15.3 kselftests-kmp-azure-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 ocfs2-kmp-azure-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 reiserfs-kmp-azure-5.3.18-150300.38.40.4 as a component of openSUSE Leap 15.3 kernel-default as a component of HPE Helion OpenStack 8 kernel-default-base as a component of HPE Helion OpenStack 8 kernel-default-devel as a component of HPE Helion OpenStack 8 kernel-default-kgraft as a component of HPE Helion OpenStack 8 kernel-devel as a component of HPE Helion OpenStack 8 kernel-macros as a component of HPE Helion OpenStack 8 kernel-source as a component of HPE Helion OpenStack 8 kernel-default as a component of SUSE Linux Enterprise Micro 5.3 kernel-default as a component of SUSE Linux Enterprise Micro 5.4 kernel-default as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-default-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-macros as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-source as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-default as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 kernel-source as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 kernel-devel-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 kernel-source-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 kernel-default as a component of SUSE Linux Enterprise Server 11 SP1 kernel-source as a component of SUSE Linux Enterprise Server 11 SP1 kernel-default as a component of SUSE Linux Enterprise Server 11 SP3 kernel-default-base as a component of SUSE Linux Enterprise Server 11 SP3 kernel-default-devel as a component of SUSE Linux Enterprise Server 11 SP3 kernel-default-man as a component of SUSE Linux Enterprise Server 11 SP3 kernel-source as a component of SUSE Linux Enterprise Server 11 SP3 kernel-default as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-devel as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-macros as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-source as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default as a component of SUSE Linux Enterprise Server 12 SP3-BCL kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP3-BCL kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP3-BCL kernel-devel as a component of SUSE Linux Enterprise Server 12 SP3-BCL kernel-macros as a component of SUSE Linux Enterprise Server 12 SP3-BCL kernel-source as a component of SUSE Linux Enterprise Server 12 SP3-BCL kernel-default as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS kernel-default-kgraft as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS kernel-source as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS kernel-default as a component of SUSE Linux Enterprise Server 12 SP3-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP3-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP3-LTSS kernel-default-kgraft as a component of SUSE Linux Enterprise Server 12 SP3-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP3-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP3-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP3-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP3-LTSS kernel-default as a component of SUSE Linux Enterprise Server Teradata 12 SP3 kernel-source as a component of SUSE Linux Enterprise Server Teradata 12 SP3 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-default-base as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-default-kgraft as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default as a component of SUSE OpenStack Cloud 8 kernel-default-base as a component of SUSE OpenStack Cloud 8 kernel-default-devel as a component of SUSE OpenStack Cloud 8 kernel-default-kgraft as a component of SUSE OpenStack Cloud 8 kernel-devel as a component of SUSE OpenStack Cloud 8 kernel-macros as a component of SUSE OpenStack Cloud 8 kernel-source as a component of SUSE OpenStack Cloud 8 kernel-default as a component of SUSE OpenStack Cloud Crowbar 8 kernel-default-base as a component of SUSE OpenStack Cloud Crowbar 8 kernel-default-devel as a component of SUSE OpenStack Cloud Crowbar 8 kernel-default-kgraft as a component of SUSE OpenStack Cloud Crowbar 8 kernel-devel as a component of SUSE OpenStack Cloud Crowbar 8 kernel-macros as a component of SUSE OpenStack Cloud Crowbar 8 kernel-source as a component of SUSE OpenStack Cloud Crowbar 8 A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. CVE-2021-4159 Image SLES15-SP3-HPC-Azure:kernel-azure-5.3.18-150300.38.40.4 SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.40.4 SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.40.4 SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.40.4 SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.40.4 SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.40.1 openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.40.4 openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.40.4 openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.40.4 openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.40.4 openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.40.4 openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.40.4 openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.40.4 openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.40.4 openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.40.4 openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.40.4 openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.40.1 openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.40.4 openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.40.4 openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.40.4 HPE Helion OpenStack 8:kernel-default HPE Helion OpenStack 8:kernel-default-base HPE Helion OpenStack 8:kernel-default-devel HPE Helion OpenStack 8:kernel-default-kgraft HPE Helion OpenStack 8:kernel-devel HPE Helion OpenStack 8:kernel-macros HPE Helion OpenStack 8:kernel-source SUSE Linux Enterprise Micro 5.3:kernel-default SUSE Linux Enterprise Micro 5.4:kernel-default SUSE Linux Enterprise Module for Basesystem 15 SP4:kernel-default SUSE Linux Enterprise Module for Basesystem 15 SP4:kernel-default-devel SUSE Linux Enterprise Module for Basesystem 15 SP4:kernel-devel SUSE Linux Enterprise Module for Basesystem 15 SP4:kernel-macros SUSE Linux Enterprise Module for Basesystem 15 SP4:kernel-source SUSE Linux Enterprise Module for Development Tools 15 SP4:kernel-default SUSE Linux Enterprise Module for Development Tools 15 SP4:kernel-source SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure SUSE Linux Enterprise Server 11 SP1:kernel-default SUSE Linux Enterprise Server 11 SP1:kernel-source SUSE Linux Enterprise Server 11 SP3:kernel-default SUSE Linux Enterprise Server 11 SP3:kernel-default-base SUSE Linux Enterprise Server 11 SP3:kernel-default-devel SUSE Linux Enterprise Server 11 SP3:kernel-default-man SUSE Linux Enterprise Server 11 SP3:kernel-source SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source SUSE Linux Enterprise Server 12 SP3-ESPOS:kernel-default SUSE Linux Enterprise Server 12 SP3-ESPOS:kernel-default-base SUSE Linux Enterprise Server 12 SP3-ESPOS:kernel-default-devel SUSE Linux Enterprise Server 12 SP3-ESPOS:kernel-default-kgraft SUSE Linux Enterprise Server 12 SP3-ESPOS:kernel-devel SUSE Linux Enterprise Server 12 SP3-ESPOS:kernel-macros SUSE Linux Enterprise Server 12 SP3-ESPOS:kernel-source SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-kgraft SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-source SUSE Linux Enterprise Server Teradata 12 SP3:kernel-default SUSE Linux Enterprise Server Teradata 12 SP3:kernel-source SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-default SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-default-base SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-default-devel SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-default-kgraft SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-devel SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-macros SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-source SUSE OpenStack Cloud 8:kernel-default SUSE OpenStack Cloud 8:kernel-default-base SUSE OpenStack Cloud 8:kernel-default-devel SUSE OpenStack Cloud 8:kernel-default-kgraft SUSE OpenStack Cloud 8:kernel-devel SUSE OpenStack Cloud 8:kernel-macros SUSE OpenStack Cloud 8:kernel-source SUSE OpenStack Cloud Crowbar 8:kernel-default SUSE OpenStack Cloud Crowbar 8:kernel-default-base SUSE OpenStack Cloud Crowbar 8:kernel-default-devel SUSE OpenStack Cloud Crowbar 8:kernel-default-kgraft SUSE OpenStack Cloud Crowbar 8:kernel-devel SUSE OpenStack Cloud Crowbar 8:kernel-macros SUSE OpenStack Cloud Crowbar 8:kernel-source SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source moderate 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N