CVE-2021-25314: hawk: Insecure file permissions

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-04-14 · updated 2026-06-17
Weakness: CWE-378

Description

A Creation of Temporary File With Insecure Permissions vulnerability in hawk2 of SUSE Linux Enterprise High Availability 12-SP3, SUSE Linux Enterprise High Availability 12-SP5, SUSE Linux Enterprise High Availability 15-SP2 allows local attackers to escalate to root. This issue affects: SUSE Linux Enterprise High Availability 12-SP3 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9. SUSE Linux Enterprise High Availability 12-SP5 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9. SUSE Linux Enterprise High Availability 15-SP2 hawk2 versions prior to 2.6.3+git.1614684118.af555ad9.

Affected products

SUSE Hawk2: before 2.6.3\+git.1614685906.812c31e9-2.42.1; before 2.6.3\+git.1614684118.af555ad9; before 2.6.3\+git.1614685906.812c31e9 — fixed in 2.6.3\+git.1614684118.af555ad9, 2.6.3\+git.1614685906.812c31e9, 2.6.3\+git.1614685906.812c31e9-2.42.1

How to fix

Upgrade to a fixed version: SUSE Hawk2 2.6.3\+git.1614684118.af555ad9, 2.6.3\+git.1614685906.812c31e9, 2.6.3\+git.1614685906.812c31e9-2.42.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-25314 or the next vulnerability affects your stack