CVE-2021-25316
Local DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-tools
A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux Enterprise Server 15-SP2 s390-tools versions prior to 2.11.0-9.20.1.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Local DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-tools
A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux Enterprise Server 15-SP2 s390-tools versions prior to 2.11.0-9.20.1.
- Record
CVE-2021-25316- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-377
- Updated
- 2026-11-02
EUVDEUVD-2021-12214
A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux Enterprise Server 15-SP2 s390-tools versions prior to 2.11.0-9.20.1.
- Record
EUVD-2021-12214- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xww5-ggv5-g549
A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5,...
A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux Enterprise Server 15-SP2 s390-tools versions prior to 2.11.0-9.20.1.
- Record
GHSA-xww5-ggv5-g549- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-377
- Updated
- 2026-11-02
NVD
A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux Enterprise Server 15-SP2 s390-tools versions prior to 2.11.0-9.20.1.
- Record
CVE-2021-25316- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-377
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13514-1 No score
s390-tools-2.30.0-1.1 on GA media
These are all security issues fixed in the s390-tools-2.30.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13514-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0776-1 No score
Security update for s390-tools
This update for s390-tools fixes the following issues:
- Fixed an issue where IPL was not working when bootloader was installed on a SCSI disk with 4k physical blocksize without using a devicemapper target (bsc#1183041).
- CVE-2021-25316: Do not use predictable temporary file names (bsc#1182777).
- Made the name of the temporary configuration file in /tmp/ unpredictable (bsc#1182876).
- Record
SUSE-SU-2021:0776-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0777-1 No score
Security update for s390-tools
This update for s390-tools fixes the following issues:
- Fixed an issue where IPL was not working when bootloader was installed on a SCSI disk with 4k physical blocksize without using a devicemapper target (bsc#1183041).
- CVE-2021-25316: Do not use predictable temporary file names (bsc#1182777).
- Made the name of the temporary configuration file in /tmp/ unpredictable (bsc#1182876).
- Changing the scheduler from 'deadline' to the newly created 'mq-deadline' scheduler (bsc#1176574)
- Record
SUSE-SU-2021:0777-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
s390-toolsSUSE:Linux Enterprise Server 12 SP5 |
before 2.1.0-18.29.1 | 2.1.0-18.29.1 |
s390-toolsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.1.0-18.29.1 | 2.1.0-18.29.1 |
s390-toolsSUSE:Linux Enterprise Module for Basesystem 15 SP2 |
before 2.11.0-9.20.1 | 2.11.0-9.20.1 |
s390-toolsopenSUSE:Tumbleweed |
before 2.30.0-1.1 | 2.30.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-25316 is a low vulnerability (CVSS 3.3) in Suse S390-tools, published March 12, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in s390-tools 2.1.0-18.29.1.