Linux kernel vulnerabilities

2021-04-1300:00:00

ubuntu.com

101

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.7%

JSON

Releases

Ubuntu 20.04 LTS
Ubuntu 18.04 ESM

Packages

linux - Linux kernel
linux-aws - Linux kernel for Amazon Web Services (AWS) systems
linux-aws-5.4 - Linux kernel for Amazon Web Services (AWS) systems
linux-azure - Linux kernel for Microsoft Azure Cloud systems
linux-azure-5.4 - Linux kernel for Microsoft Azure cloud systems
linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
linux-gcp-5.4 - Linux kernel for Google Cloud Platform (GCP) systems
linux-gke-5.4 - Linux kernel for Google Container Engine (GKE) systems
linux-gkeop - Linux kernel for Google Container Engine (GKE) systems
linux-gkeop-5.4 - Linux kernel for Google Container Engine (GKE) systems
linux-hwe-5.4 - Linux hardware enablement (HWE) kernel
linux-kvm - Linux kernel for cloud environments
linux-oracle - Linux kernel for Oracle Cloud systems
linux-oracle-5.4 - Linux kernel for Oracle Cloud systems
linux-raspi - Linux kernel for Raspberry Pi (V8) systems
linux-raspi-5.4 - Linux kernel for Raspberry Pi (V8) systems

Details

Loris Reiff discovered that the BPF implementation in the Linux kernel did
not properly validate attributes in the getsockopt BPF hook. A local
attacker could possibly use this to cause a denial of service (system
crash). (CVE-2021-20194)

Olivier Benjamin, Norbert Manthey, Martin Mazein, and Jan H. Schönherr
discovered that the Xen paravirtualization backend in the Linux kernel did
not properly propagate errors to frontend drivers in some situations. An
attacker in a guest VM could possibly use this to cause a denial of service
(host domain crash). (CVE-2021-26930)

Jan Beulich discovered that multiple Xen backends in the Linux kernel did
not properly handle certain error conditions under paravirtualization. An
attacker in a guest VM could possibly use this to cause a denial of service
(host domain crash). (CVE-2021-26931)

It was discovered that the network block device (nbd) driver in the Linux
kernel contained a use-after-free vulnerability during device setup. A
local attacker with access to the nbd device could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2021-3348)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchlinux-image-5.4.0-1013-gkeop< 5.4.0-1013.14UNKNOWN
Ubuntu20.04noarchlinux-image-5.4.0-1013-gkeop-dbgsym< 5.4.0-1013.14UNKNOWN
Ubuntu20.04noarchlinux-image-5.4.0-1033-raspi< 5.4.0-1033.36UNKNOWN
Ubuntu20.04noarchlinux-buildinfo-5.4.0-1033-raspi< 5.4.0-1033.36UNKNOWN
Ubuntu20.04noarchlinux-headers-5.4.0-1033-raspi< 5.4.0-1033.36UNKNOWN
Ubuntu20.04noarchlinux-image-5.4.0-1033-raspi-dbgsym< 5.4.0-1033.36UNKNOWN
Ubuntu20.04noarchlinux-modules-5.4.0-1033-raspi< 5.4.0-1033.36UNKNOWN
Ubuntu20.04noarchlinux-raspi-headers-5.4.0-1033< 5.4.0-1033.36UNKNOWN
Ubuntu20.04noarchlinux-raspi-tools-5.4.0-1033< 5.4.0-1033.36UNKNOWN
Ubuntu20.04noarchlinux-tools-5.4.0-1033-raspi< 5.4.0-1033.36UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	20.04	noarch	linux-image-5.4.0-1013-gkeop	< 5.4.0-1013.14	UNKNOWN
Ubuntu	20.04	noarch	linux-image-5.4.0-1013-gkeop-dbgsym	< 5.4.0-1013.14	UNKNOWN
Ubuntu	20.04	noarch	linux-image-5.4.0-1033-raspi	< 5.4.0-1033.36	UNKNOWN
Ubuntu	20.04	noarch	linux-buildinfo-5.4.0-1033-raspi	< 5.4.0-1033.36	UNKNOWN
Ubuntu	20.04	noarch	linux-headers-5.4.0-1033-raspi	< 5.4.0-1033.36	UNKNOWN
Ubuntu	20.04	noarch	linux-image-5.4.0-1033-raspi-dbgsym	< 5.4.0-1033.36	UNKNOWN
Ubuntu	20.04	noarch	linux-modules-5.4.0-1033-raspi	< 5.4.0-1033.36	UNKNOWN
Ubuntu	20.04	noarch	linux-raspi-headers-5.4.0-1033	< 5.4.0-1033.36	UNKNOWN
Ubuntu	20.04	noarch	linux-raspi-tools-5.4.0-1033	< 5.4.0-1033.36	UNKNOWN
Ubuntu	20.04	noarch	linux-tools-5.4.0-1033-raspi	< 5.4.0-1033.36	UNKNOWN