SB2022030227 - SUSE update for the Linux Kernel (Live Patch 7 for SLE 15 SP3) 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2022030227

SB2022030227 - SUSE update for the Linux Kernel (Live Patch 7 for SLE 15 SP3)

Published: March 2, 2022 Updated: September 19, 2025

Security Bulletin ID SB2022030227
Severity
High
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

High 33% Low 67%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 secuirty vulnerabilities.


1) Use-after-free (CVE-ID: CVE-2021-0920)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the unix_scm_to_skb() function of af_unix.c in Linux kernel. A local user can run a specially crafted program to trigger a race condition and execute arbitrary code with elevated privileges.



2) Double Free (CVE-ID: CVE-2021-22600)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in the packet_set_ring() function in net/packet/af_packet.c. A local user can pass specially crafted data to the application, trigger double free error and escalate privileges on the system.

Note, the vulnerability is being actively exploited in the wild against Android users.


3) Out-of-bounds write (CVE-ID: CVE-2022-0516)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in kvm_s390_guest_sida_op() function in the arch/s390/kvm/kvm-s390.c in KVM for s390 in the Linux kernel. A local user can trigger an out-of-bounds write and escalate privileges on the system.


Remediation

Install update from vendor's website.

References