Description
kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.14.6-1 | — |
| Debian 13 | linux | 5.14.6-1 | — |
| Debian 12 | linux | 5.14.6-1 | — |
| Debian 9 | linux-4.19 | 4.19.208-1~deb9u1 | DLA-2785-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux-realtime +1 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-aws-5.11 +1 | 5.11.0-1017.18~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-azure-5.11 | 5.11.0-1015.16~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-gcp-5.11 | 5.11.0-1018.20~20.04.2 | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1069.73+fips2 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1073.76+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1033.38 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1067.71~20.04.1 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips +3 | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP3 | kernel-64kb +7 | 5.3.18-59.19.1 | SUSE-SU-2021:2687-1 |
| SLES 15 SP3 | kernel-azure +2 | 5.3.18-38.17.1 | SUSE-SU-2021:2645-1 |
| SLES 15 SP3 | kernel-default-base | 5.3.18-59.19.1.18.10.1 | SUSE-SU-2021:2687-1 |
| SLES 15 SP2 | kernel-azure +2 | 5.3.18-18.58.1 | SUSE-SU-2021:2408-1 |
| SLES 15 SP2 | kernel-default +2 | 5.3.18-24.75.3 | SUSE-SU-2021:2438-1 |
| SLES 15 SP2 | kernel-default-base | 5.3.18-24.75.3.9.34.3 | SUSE-SU-2021:2438-1 |
| SLES 15 SP2 | kernel-docs +1 | 5.3.18-24.75.2 | SUSE-SU-2021:2438-1 |
| SLES 15 SP2 | kernel-syms | 5.3.18-24.75.1 | SUSE-SU-2021:2438-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 5.0 | kernel-default | 5.3.18-24.75.3 | SUSE-SU-2021:2438-1 |
| SLE Micro 5.0 | kernel-default-base | 5.3.18-24.75.3.9.34.3 | SUSE-SU-2021:2438-1 |
| SLE Micro 5.0 | kernel-rt | 5.3.18-45.3 | SUSE-SU-2021:2599-2 |
| SLE Live Patching 15 SP3 | kernel-default | 5.3.18-59.19.1 | SUSE-SU-2021:2687-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_5 | 1-7.3.1 | SUSE-SU-2021:2687-1 |
| SLE Live Patching 15 SP2 | kernel-default | 5.3.18-24.75.3 | SUSE-SU-2021:2438-1 |
| SLE Live Patching 15 SP2 | kernel-livepatch-SLE15-SP2_Update_17 | 1-5.3.3 | SUSE-SU-2021:2438-1 |
| SUSE Real Time Module 15 SP2 | kernel-rt +2 | 5.3.18-45.3 | SUSE-SU-2021:2599-1 |
| SUSE Real Time Module 15 SP2 | kernel-syms-rt | 5.3.18-45.2 | SUSE-SU-2021:2599-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.3 | dtb-aarch64 +11 | 5.3.18-59.19.1 | openSUSE-SU-2021:2687-1 |
| openSUSE Leap 15.3 | kernel-azure +2 | 5.3.18-38.17.1 | openSUSE-SU-2021:2645-1 |
| openSUSE Leap 15.3 | kernel-default-base | 5.3.18-59.19.1.18.10.1 | openSUSE-SU-2021:2687-1 |
| openSUSE Leap 15.2 | kernel-default-base | 5.3.18-lp152.84.1.lp152.8.38.1 | openSUSE-SU-2021:1076-1 |
| openSUSE Leap 15.2 | kernel-docs +8 | 5.3.18-lp152.84.1 | openSUSE-SU-2021:1076-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | kernel | 5.10.78.1-1 | — |
Advisories 10
- DLA-2785-1 linux-4.19 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2021:2687-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:2645-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:2599-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:2645-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:1076-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:2408-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:2438-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:2599-2 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2021:2687-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
References
- https://www.openwall.com/lists/oss-security/2021/07/06/3
- https://github.com/torvalds/linux/commit/0c18f29aae7ce3dadd26d8ee3505d07cc982df75
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.14
- [oss-security] 20210706 CVE-2021-35039: Linux kernel loading unsigned kernel modules via init_module syscall mailing-list
- https://security.netapp.com/advisory/ntap-20210813-0004/
- [debian-lts-announce] 20211015 [SECURITY] [DLA 2785-1] linux-4.19 security update mailing-list
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0c18f29aae7ce3dadd26d8ee3505d07cc982df75