{"id":"MGASA-2021-0589","summary":"Updated kernel-linus packages fix security vulnerabilities","details":"This kernel-linus update is based on upstream 5.15.11 and fixes at least the\nfollowing security issues:\n\nnetdevsim: Zero-initialize memory for new map's value in function\nnsim_bpf_map_alloc (CVE-2021-4135).\n\nPotentially malicious XEN PV backends can cause guest DoS due to unhardened\nfrontends in the guests, even though this ought to have been prevented by\ncontaining them within a driver domain. This update fixes the issue tracked\nas XSA-391: blkfront (CVE-2021-28711), netfront (CVE-2021-28712),\nhvc_xen (CVE-2021-28713).\n\nThe Linux kernel's xen-netback backend driver can be forced by guests to\nqueue arbitrary amounts of network data, finally causing an out of memory\nsituation in the domain the backend is running in (usually dom0). This\nupdate fixes the issues tracked as XSA-392 (CVE-2021-28714, CVE-2021-28715).\n\nrds: memory leak in __rds_conn_create() (CVE-2021-45480).\n\nFor other upstream fixes, see the referenced changelogs.\n","modified":"2026-04-16T00:10:52.343175758Z","published":"2021-12-29T19:12:56Z","upstream":["CVE-2021-28711","CVE-2021-28712","CVE-2021-28713","CVE-2021-28714","CVE-2021-28715","CVE-2021-4135","CVE-2021-45480"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2021-0589.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=29814"},{"type":"WEB","url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.11"},{"type":"ADVISORY","url":"https://xenbits.xen.org/xsa/advisory-391.html"},{"type":"ADVISORY","url":"https://xenbits.xen.org/xsa/advisory-392.html"}],"affected":[{"package":{"name":"kernel-linus","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/kernel-linus?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.11-1.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0589.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}