{"id":"MGASA-2021-0192","summary":"Updated kernel packages fix security vulnerabilities","details":"This kernel update is based on upstream 5.10.30 and fixes at least the\nfollowing security issues:\n\nnfc: fix refcount leak in llcp_sock_bind() (CVE-2020-25670)\n\nnfc: fix refcount leak in llcp_sock_connect() (CVE-2020-25671)\n\nnfc: fix memory leak in llcp_sock_connect() (CVE-2020-25672)\n\nfirewire: nosy: Fix a use-after-free bug in nosy_ioctl() (CVE-2021-3483)\n\nBPF JIT compilers in the Linux kernel through 5.11.12 have incorrect\ncomputation of branch displacements, allowing them to execute arbitrary \ncode within the kernel context (CVE-2021-29154).\n\nKVM: SVM: load control fields from VMCB12 before checking them\n(CVE-2021-29657).\n\nIt also adds the following fixes:\n- x86/fpu/64: Don't FNINIT in kernel_fpu_begin()\n- Revert \"iommu/amd: Fix performance counter  initialization\"\n- iommu/amd: Remove performance counter pre-initialization test\n- hwmon: (amd_energy) Add AMD family 19h model 30h x86 match\n- hwmon: (amd_energy) Use unified function to read energy data\n- hwmon: (amd_energy) Restore visibility of energy counters\n\nFor other upstream fixes, see the referenced changelogs.\n","modified":"2026-04-16T00:12:42.812107353Z","published":"2021-04-18T14:50:05Z","upstream":["CVE-2020-25670","CVE-2020-25671","CVE-2020-25672","CVE-2021-29154","CVE-2021-29657","CVE-2021-3483"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2021-0192.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=28782"},{"type":"WEB","url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.28"},{"type":"WEB","url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.29"},{"type":"WEB","url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.30"}],"affected":[{"package":{"name":"kernel","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/kernel?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.30-1.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0192.json"}},{"package":{"name":"kmod-virtualbox","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/kmod-virtualbox?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.18-14.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0192.json"}},{"package":{"name":"kmod-xtables-addons","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/kmod-xtables-addons?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13-20.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0192.json"}},{"package":{"name":"kernel","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/kernel?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.30-1.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0192.json"}},{"package":{"name":"kmod-virtualbox","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/kmod-virtualbox?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.18-24.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0192.json"}},{"package":{"name":"kmod-xtables-addons","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/kmod-xtables-addons?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13-40.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0192.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}