The SUSE Linux Enterprise 15 SP3 kernel for Azure was updated to receive various security and bugfixes.
The following security bugs were fixed:
Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)
You can reenable via systemctl setting /proc/sys/kernel/unprivilegedbpfdisabled to 0. (kernel.unprivilegedbpfdisabled = 0)
CVE-2021-0941: In bpfskbchange_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
The following non-security bugs were fixed:
{ "binaries": [ { "reiserfs-kmp-azure": "5.3.18-38.31.1", "kernel-devel-azure": "5.3.18-38.31.1", "dlm-kmp-azure": "5.3.18-38.31.1", "cluster-md-kmp-azure": "5.3.18-38.31.1", "kernel-azure-extra": "5.3.18-38.31.1", "gfs2-kmp-azure": "5.3.18-38.31.1", "kernel-azure-optional": "5.3.18-38.31.1", "kernel-azure-devel": "5.3.18-38.31.1", "kernel-azure": "5.3.18-38.31.1", "kselftests-kmp-azure": "5.3.18-38.31.1", "kernel-syms-azure": "5.3.18-38.31.1", "kernel-azure-livepatch-devel": "5.3.18-38.31.1", "ocfs2-kmp-azure": "5.3.18-38.31.1", "kernel-source-azure": "5.3.18-38.31.1" } ] }
{ "binaries": [ { "reiserfs-kmp-azure": "5.3.18-38.31.1", "kernel-devel-azure": "5.3.18-38.31.1", "dlm-kmp-azure": "5.3.18-38.31.1", "cluster-md-kmp-azure": "5.3.18-38.31.1", "kernel-azure-extra": "5.3.18-38.31.1", "gfs2-kmp-azure": "5.3.18-38.31.1", "kernel-azure-optional": "5.3.18-38.31.1", "kernel-azure-devel": "5.3.18-38.31.1", "kernel-azure": "5.3.18-38.31.1", "kselftests-kmp-azure": "5.3.18-38.31.1", "kernel-syms-azure": "5.3.18-38.31.1", "kernel-azure-livepatch-devel": "5.3.18-38.31.1", "ocfs2-kmp-azure": "5.3.18-38.31.1", "kernel-source-azure": "5.3.18-38.31.1" } ] }
{ "binaries": [ { "reiserfs-kmp-azure": "5.3.18-38.31.1", "kernel-devel-azure": "5.3.18-38.31.1", "dlm-kmp-azure": "5.3.18-38.31.1", "cluster-md-kmp-azure": "5.3.18-38.31.1", "kernel-azure-extra": "5.3.18-38.31.1", "gfs2-kmp-azure": "5.3.18-38.31.1", "kernel-azure-optional": "5.3.18-38.31.1", "kernel-azure-devel": "5.3.18-38.31.1", "kernel-azure": "5.3.18-38.31.1", "kselftests-kmp-azure": "5.3.18-38.31.1", "kernel-syms-azure": "5.3.18-38.31.1", "kernel-azure-livepatch-devel": "5.3.18-38.31.1", "ocfs2-kmp-azure": "5.3.18-38.31.1", "kernel-source-azure": "5.3.18-38.31.1" } ] }