CVE-2021-25314: Suse HAWK2

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A Creation of Temporary File With Insecure Permissions vulnerability in hawk2 of SUSE Linux Enterprise High Availability 12-SP3, SUSE Linux Enterprise High Availability 12-SP5, SUSE Linux Enterprise High Availability 15-SP2 allows local attackers to escalate to root. This issue affects: SUSE Linux Enterprise High Availability 12-SP3 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9. SUSE Linux Enterprise High Availability 12-SP5 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9. SUSE Linux Enterprise High Availability 15-SP2 hawk2 versions prior to 2.6.3+git.1614684118.af555ad9.

Affected products

• Suse HAWK2: before 2.6.3\+git.1614685906.812c31e9-2.42.1 (fixed in 2.6.3\+git.1614685906.812c31e9-2.42.1); before 2.6.3\+git.1614684118.af555ad9 (fixed in 2.6.3\+git.1614684118.af555ad9); before 2.6.3\+git.1614685906.812c31e9 (fixed in 2.6.3\+git.1614685906.812c31e9)

Published 2021-04-14. Last modified 2026-06-17.