Veeam Warns Critical 9.8 Linux Kernel Flaw Could Crash Backup Appliances and Disrupt Recovery Operations - CyberSecurityNews
Veeam has identified a critical Linux kernel vulnerability with a CVSS score of 9.8 that could crash backup appliances and disrupt recovery operations.
In a November 6 impact statement, Veeam revealed a Linux kernel use-after-free vulnerability in TCP/IPv4 connection setup that could cause denial of service or memory corruption across its backup and recovery products. The company has outlined update paths for affected systems, though it has not reported active exploitation or confirmed remote code execution.
Affected Products
The vulnerability impacts Veeam Software Appliance 13.1 and Veeam Infrastructure Appliance 13.1, including backup proxies, hardened repositories, mount servers, gateways, and Cloud Connect components. Windows-based Veeam Backup & Replication installations are also affected as they deploy Linux helper appliances that support file recovery, virtual labs, and cloud restores.
Patch Availability
Veeam has released a patched kernel (version 5.14.0-570.60.1+27.2.el9_6_ciq) for Software Appliance and Infrastructure Appliance 13.1 since November 2, delivered through Veeam Updater. For Windows deployments, the 13.1 private fix requires Backup & Replication 13.1.2.57, while a fix for version 12.3 is expected soon.
Update Process
Administrators can install updates from the Veeam Host Management console without waiting for the automatic schedule, though a restart may be required. The updater checks repositories every 12 hours, with mandatory updates installing by default on Sundays at 14:00 in the backup server's time zone. Teams should verify installation history and ensure local repository mirrors are synchronized.
Related
