Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-25316 Details

Description

A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux Enterprise Server 15-SP2 s390-tools versions prior to 2.11.0-9.20.1.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:3.3 LOWVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CNA: [email protected]CVSS-B:3.3 LOWVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://bugzilla.suse.com/show_bug.cgi?id=1182777	CVE	ExploitIssue TrackingVendor Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1182777	[email protected]	ExploitIssue TrackingVendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-377	Insecure Temporary File	[email protected]

Affected Products

Product	Versions
suse s390-tools	< 2.1.0-18.29.1 < 2.11.0-9.20.1
CPE cpe:2.3:a:suse:s390-tools:::::::: Remediation No remediation found in references.
suse linux enterprise server	15 sp5 15 sp2
CPE cpe:2.3:o:suse:linux_enterprise_server:15:sp5:::::: cpe:2.3:o:suse:linux_enterprise_server:15:sp2:::::: Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Apr 14, 2023	Modified Analysis	[email protected]
Jan 19, 2023	CVE Modified	[email protected]
Apr 21, 2021	Initial Analysis	[email protected]