Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5140-1
HistoryNov 11, 2021 - 12:00 a.m.

Linux kernel (OEM 5.14) vulnerabilities

2021-11-1100:00:00
ubuntu.com
92
linux kernel
oem systems
ubuntu 20.04 lts
vulnerabilities
amd cryptographic coprocessor
ccp driver
memory exhaustion
integer overflow
ebpf implementation

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

32.2%

JSON

Releases

  • Ubuntu 20.04 LTS

Packages

  • linux-oem-5.14 - Linux kernel for OEM systems

Details

It was discovered that the AMD Cryptographic Coprocessor (CCP) driver in
the Linux kernel did not properly deallocate memory in some error
conditions. A local attacker could use this to cause a denial of service
(memory exhaustion). (CVE-2021-3744, CVE-2021-3764)

It was discovered that an integer overflow could be triggered in the eBPF
implementation in the Linux kernel when preallocating objects for stack
maps. A privileged local attacker could use this to cause a denial of
service or possibly execute arbitrary code. (CVE-2021-41864)

Related

nessus 72
openvas 42
osv 16
mageia 2
fedora 3
ubuntucve 3
ubuntu 10
cloudfoundry 5
amazon 1
oraclelinux 5
cbl_mariner 4
debiancve 3
prion 3
cve 3
cvelist 3
redhatcve 3
veracode 3
nvd 3
f5 1
suse 6
photon 4
ibm 1
rocky 2
almalinux 1
nessus
nessus
Ubuntu 20.04 LTS : Linux kernel (OEM 5.14) vulnerabilities (USN-5140-1)
2021-11-11 00:00:00
Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-027)
2022-07-21 00:00:00
Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-031)
2022-07-22 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5140-1)
2021-11-12 00:00:00
Mageia: Security Advisory (MGASA-2021-0489)
2022-01-28 00:00:00
Mageia: Security Advisory (MGASA-2021-0490)
2022-01-28 00:00:00
osv
osv
linux-oem-5.14 vulnerabilities
2021-11-11 05:40:50
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
2021-11-30 23:08:43
linux-oem-5.10 vulnerabilities
2021-11-11 05:32:20
mageia
mageia
Updated kernel packages fix security vulnerabilities
2021-10-25 18:49:26
Updated kernel-linus packages fix security vulnerabilities
2021-10-25 18:49:26
fedora
fedora
[SECURITY] Fedora 35 Update: kernel-5.14.10-300.fc35
2021-10-09 01:36:43
[SECURITY] Fedora 34 Update: kernel-5.14.10-200.fc34
2021-10-11 21:33:46
[SECURITY] Fedora 33 Update: kernel-5.14.10-100.fc33
2021-10-11 21:36:34
ubuntucve
ubuntucve
CVE-2021-3764
2021-09-15 00:00:00
CVE-2021-41864
2021-10-02 00:00:00
CVE-2021-3744
2021-09-15 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2021-11-30 00:00:00
Linux kernel (OEM 5.10) vulnerabilities
2021-11-11 00:00:00
Linux kernel vulnerabilities
2021-11-30 00:00:00
cloudfoundry
cloudfoundry
USN-5164-1: Linux kernel vulnerabilities | Cloud Foundry
2022-01-20 00:00:00
USN-5163-1: Linux kernel vulnerabilities | Cloud Foundry
2022-01-20 00:00:00
USN-5209-1: Linux kernel vulnerabilities | Cloud Foundry
2022-03-08 00:00:00
amazon
amazon
Important: kernel
2021-10-28 23:22:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel-container security update
2021-12-20 00:00:00
Unbreakable Enterprise kernel security update
2021-12-20 00:00:00
Unbreakable Enterprise kernel security update
2021-11-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-41864 affecting package kernel for versions less than 5.10.78.1-1
2022-04-09 06:52:47
CVE-2021-41864 affecting package kernel 5.10.189.1-1
2021-11-03 19:21:29
CVE-2021-3764 affecting package kernel 5.10.131.1-1
2022-09-17 05:57:05
debiancve
debiancve
CVE-2021-41864
2021-10-02 00:15:07
CVE-2021-3764
2022-08-23 16:15:09
CVE-2021-3744
2022-03-04 16:15:08
prion
prion
Integer overflow
2021-10-02 00:15:00
Memory corruption
2022-03-04 16:15:00
Memory corruption
2022-08-23 16:15:00
cve
cve
CVE-2021-41864
2021-10-02 00:15:07
CVE-2021-3764
2022-08-23 16:15:09
CVE-2021-3744
2022-03-04 16:15:08
cvelist
cvelist
CVE-2021-41864
2021-10-01 23:46:17
CVE-2021-3764
2022-08-23 15:52:14
CVE-2021-3744
2022-03-04 15:55:17
redhatcve
redhatcve
CVE-2021-41864
2021-10-04 17:53:50
CVE-2021-3764
2021-09-12 12:17:35
CVE-2021-3744
2021-09-12 12:17:33
veracode
veracode
Denial Of Service (DoS)
2022-01-15 00:38:33
Denial Of Service (DoS)
2021-12-28 10:07:22
Denial Of Service (DoS)
2021-12-28 10:06:58
nvd
nvd
CVE-2021-41864
2021-10-02 00:15:07
CVE-2021-3764
2022-08-23 16:15:09
CVE-2021-3744
2022-03-04 16:15:08
f5
f5
K11255393 : Linux kernel vulnerability CVE-2021-41864
2022-10-18 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2021-10-18 00:00:00
Security update for the Linux Kernel (important)
2021-10-12 00:00:00
Security update for the Linux Kernel (important)
2021-10-15 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2021-3.0-0325
2021-11-04 00:00:00
Important Photon OS Security Update - PHSA-2021-0415
2021-11-11 00:00:00
Important Photon OS Security Update - PHSA-2021-0126
2021-11-10 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in the Linux Kernel affect IBM Spectrum Copy Data Management
2022-06-09 17:51:49
rocky
rocky
kernel-rt security and bug fix update
2022-05-10 06:42:36
kernel security, bug fix, and enhancement update
2022-05-10 08:11:36
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2022-05-10 08:11:36

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

32.2%

JSON
Related for USN-5140-1
nessus72openvas42osv16mageia2fedora3ubuntucve3ubuntu10cloudfoundry5amazon1oraclelinux5cbl_mariner4debiancve3prion3cve3cvelist3redhatcve3veracode3nvd3f51suse6photon4ibm1rocky2almalinux1