7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
46.7%
It was discovered that the f2fs file system in the Linux kernel did not
properly validate metadata in some situations. An attacker could use this
to construct a malicious f2fs image that, when mounted and operated on,
could cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2019-19449)
It was discovered that the FUSE user space file system implementation in
the Linux kernel did not properly handle bad inodes in some situations. A
local attacker could possibly use this to cause a denial of service.
(CVE-2020-36322)
It was discovered that the Infiniband RDMA userspace connection manager
implementation in the Linux kernel contained a race condition leading to a
use-after-free vulnerability. A local attacker could use this to cause a
denial of service (system crash) or possible execute arbitrary code.
(CVE-2020-36385)
Ilja Van Sprundel discovered that the SCTP implementation in the Linux
kernel did not properly perform size validations on incoming packets in
some situations. An attacker could possibly use this to expose sensitive
information (kernel memory). (CVE-2021-3655)
It was discovered that the Qualcomm IPC Router protocol implementation in
the Linux kernel did not properly validate metadata in some situations. A
local attacker could use this to cause a denial of service (system crash)
or expose sensitive information. (CVE-2021-3743)
It was discovered that the virtual terminal (vt) device implementation in
the Linux kernel contained a race condition in its ioctl handling that led
to an out-of-bounds read vulnerability. A local attacker could possibly use
this to expose sensitive information. (CVE-2021-3753)
It was discovered that the Linux kernel did not properly account for the
memory usage of certain IPC objects. A local attacker could use this to
cause a denial of service (memory exhaustion). (CVE-2021-3759)
Michael Wakabayashi discovered that the NFSv4 client implementation in the
Linux kernel did not properly order connection setup operations. An
attacker controlling a remote NFS server could use this to cause a denial
of service on the client. (CVE-2021-38199)
It was discovered that the Aspeed Low Pin Count (LPC) Bus Controller
implementation in the Linux kernel did not properly perform boundary checks
in some situations, allowing out-of-bounds write access. A local attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. In Ubuntu, this issue only affected systems running
armhf kernels. (CVE-2021-42252)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 18.04 | noarch | linux-image-4.15.0-1030-dell300x | < 4.15.0-1030.35 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-image-4.15.0-1030-dell300x-dbgsym | < 4.15.0-1030.35 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-image-4.15.0-1083-oracle | < 4.15.0-1083.91 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-image-4.15.0-1083-oracle-dbgsym | < 4.15.0-1083.91 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-image-4.15.0-1098-raspi2 | < 4.15.0-1098.104 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-buildinfo-4.15.0-1098-raspi2 | < 4.15.0-1098.104 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-headers-4.15.0-1098-raspi2 | < 4.15.0-1098.104 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-image-4.15.0-1098-raspi2-dbgsym | < 4.15.0-1098.104 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-modules-4.15.0-1098-raspi2 | < 4.15.0-1098.104 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-raspi2-headers-4.15.0-1098 | < 4.15.0-1098.104 | UNKNOWN |
ubuntu.com/security/CVE-2019-19449
ubuntu.com/security/CVE-2020-36322
ubuntu.com/security/CVE-2020-36385
ubuntu.com/security/CVE-2021-3655
ubuntu.com/security/CVE-2021-3743
ubuntu.com/security/CVE-2021-3753
ubuntu.com/security/CVE-2021-3759
ubuntu.com/security/CVE-2021-38199
ubuntu.com/security/CVE-2021-42252
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
46.7%