|
Vulnerabilities
< Back

CVE-2021-35039

Updated on 07 Jul 2021

Severity

7.8 High severity

Details

CVSS score
7.8
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.

Details

Affected product:
AlmaLinux 8 , Amazon Linux 2 ELS , CentOS 6 , CentOS 6 ELS , CentOS 6 plus , CentOS 7 , CentOS 7 plus , CentOS 8 , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux OS 6 , CloudLinux OS 6h , CloudLinux OS 7 , CloudLinux OS 7h , CloudLinux OS 8 , Debian 10 , Debian 10 ELS , Debian 10 cloud , Debian 9 , Endurance 7 eig 3.10 , OpenVZ 6 , Oracle Linux 6 ELS , Oracle Linux 7 ELS , Proxmox VE 5 , Proxmox VE 6 , RHEL 6 , RHEL 7 , RHEL 8 , Rocky Linux 8 , Scientific 6 , Ubuntu 14.04 , Ubuntu 14.04 ESM , Ubuntu 16.04 , Ubuntu 16.04 ELS , Ubuntu 16.04 ESM , Ubuntu 18.04 , Ubuntu 18.04 ELS , Ubuntu 20.04 , Upstream 4.19
Affected packages:
linux-lts-xenial @ - (+68 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
CentOS 7 alt-5.4 Released
8 kernels
  • 5.4.72-200.el7
  • 5.4.105-200.el7
  • 5.4.115-200.el7
  • 5.4.121-200.el7
  • 5.4.125-200.el7
  • 5.4.84-200.el7
  • 5.4.88-200.el7
  • 5.4.96-200.el7
Debian 10 Released
19 kernels
  • 4.19.118-2
  • 4.19.160-2
  • 4.19.194-2
  • 4.19.37-5
  • 4.19.181-1
  • 4.19.152-1
  • 4.19.98-1
  • 4.19.132-1
  • 4.19.194-3
  • 4.19.67-2+deb10u1
  • 4.19.171-2
  • 4.19.98-1+deb10u1
  • 4.19.118-2+deb10u1
  • 4.19.37-5+deb10u2
  • 4.19.67-2+deb10u2
  • 4.19.67-2
  • 4.19.194-1
  • 4.19.37-5+deb10u1
  • 4.19.146-1
Debian 10 cloud Released
13 kernels
  • 4.19.171-2
  • 4.19.118-2
  • 4.19.160-2
  • 4.19.194-2
  • 4.19.67-2+deb10u2
  • 4.19.194-1
  • 4.19.152-1
  • 4.19.146-1
  • 4.19.181-1
  • 4.19.118-2+deb10u1
  • 4.19.194-3
  • 4.19.98-1+deb10u1
  • 4.19.132-1
Debian 11 Released
1 kernel
  • 5.10.46-4
Debian 9 backports Released
11 kernels
  • 4.19.194-3~deb9u1
  • 4.19.132-1~deb9u2
  • 4.19.98-1~bpo9+1
  • 4.19.118-2+deb10u1~bpo9+1
  • 4.19.146-1~deb9u1
  • 4.19.171-2~deb9u1
  • 4.19.67-2+deb10u2~bpo9+1
  • 4.19.152-1~deb9u1
  • 4.19.181-1~deb9u1
  • 4.19.194-1~deb9u1
  • 4.19.160-2~deb9u1
Ubuntu 20.04 AWS Hirsute Will Not Fix —