UbuntuUSN-5266-1Linux kernel (GKE) vulnerabilities
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
29.5%
Releases
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
Packages
- linux-gke - Linux kernel for Google Container Engine (GKE) systems
- linux-gke-5.4 - Linux kernel for Google Container Engine (GKE) systems
Details
It was discovered that the Packet network protocol implementation in the
Linux kernel contained a double-free vulnerability. A local attacker could
use this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2021-22600)
Luo Likang discovered that the FireDTV Firewire driver in the Linux kernel
did not properly perform bounds checking in some situations. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2021-42739)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 20.04 | noarch | linux-image-gke | < 5.4.0.1061.71 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-gke | < 5.4.0.1061.71 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-gke-5.4 | < 5.4.0.1061.71 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-headers-gke | < 5.4.0.1061.71 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-headers-gke-5.4 | < 5.4.0.1061.71 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-image-gke-5.4 | < 5.4.0.1061.71 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-modules-extra-gke | < 5.4.0.1061.71 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-modules-extra-gke-5.4 | < 5.4.0.1061.71 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-tools-gke | < 5.4.0.1061.71 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-tools-gke-5.4 | < 5.4.0.1061.71 | UNKNOWN |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
29.5%