Security vulnerability: Sequoia kernel root exploit ( CVE-2021-33909 )

This document (000020341) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 12

Situation

Security researchers from Qualys have identified a security issue in the Linux Kernel where local attackers could reliably exploit an integer overflow to execute code in the kernel and so escalate privileges.

Qualys refers to this vulnerability as "Sequoia: A deep root in Linux's filesystem layer (CVE-2021-33909)"

Resolution

Update to the latest released kernel after July 20, 2021.

Status

Security Alert

Additional Information

More information:
Mitre: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33909
SUSE CVE page: http://suse.com/security/cve/CVE-2021-33909/
Qualys: https://www.qualys.com/2021/07/20/cve-2021-33909/sequoia-local-privilege-escalation-linux.txt

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

Document ID:000020341
Creation Date: 20-Jul-2021
Modified Date:20-Jul-2021
- SUSE Linux Enterprise Server
- SUSE Linux Enterprise Server for SAP Applications

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com