CVE-2021-35039 log
| Source |
|
| Severity | Medium |
| Remote | No |
| Type | Certificate verification bypass |
| Description | kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2122 | linux-lts | 5.10.46-1 | 5.10.47-1 | Medium | Fixed | |
| AVG-2121 | linux-hardened | 5.12.13.hardened1-1 | 5.12.14.hardened1-1 | Medium | Fixed | |
| AVG-2120 | linux-zen | 5.12.13.zen1-2 | 5.12.14.zen1-1 | Medium | Fixed | |
| AVG-2119 | linux | 5.12.13.arch1-2 | 5.12.14.arch1-1 | Medium | Fixed |