CVE-2021-25316

LOW

SUSE Linux Enterprise Server <12-SP5, 15-SP2 - Local Privilege Esca...

Title source: llm

Description

A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux Enterprise Server 15-SP2 s390-tools versions prior to 2.11.0-9.20.1.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Vendor Advisory

https://bugzilla.suse.com/show_bug.cgi?id=1182777

Scores

CVSS v3 3.3

EPSS 0.0032

EPSS Percentile 22.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Details

CWE

CWE-377

Status published

Products (1)

suse/s390-tools < 2.1.0-18.29.1

Published Apr 14, 2021

Tracked Since Feb 18, 2026