File _patchinfo of Package patchinfo.21836
<patchinfo incident="21836">
<issue id="1191318" tracker="bnc">VUL-0: CVE-2021-41864: kernel live patch: eBPF multiplication integer overflow in prealloc_elems_and_freelist() in kernel/bpf/stackmap.c leads to out-of-bounds write</issue>
<issue id="1191646" tracker="bnc">VUL-0: CVE-2021-34866: kernel live patch: Linux Kernel eBPF Type Confusion Privilege Escalation Vulnerability</issue>
<issue id="2021-34866" tracker="cve" />
<issue id="2021-41864" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>nstange</packager>
<description>This update for the Linux Kernel 5.3.18-59_13 fixes several issues.
The following security issues were fixed:
- CVE-2021-34866: Fixed possible eBPF Type Confusion privilege escalation vulnerability via eBPF type confusion (bsc#1191646).
- CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
</description>
<summary>Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP3)</summary>
</patchinfo>