Linux kernel (AWS) vulnerability

2022-09-0200:00:00

ubuntu.com

ubuntu 18.04; linux kernel; aws; vulnerability; denial of service; out-of-bounds write; arbitrary code

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

Releases

Ubuntu 18.04 ESM

Packages

linux-aws - Linux kernel for Amazon Web Services (AWS) systems

Details

It was discovered that the virtual terminal driver in the Linux kernel did
not properly handle VGA console font changes, leading to an out-of-bounds
write. A local attacker could use this to cause a denial of service (system
crash) or possibly execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchlinux-image-aws-lts-18.04< 4.15.0.1140.140UNKNOWN
Ubuntu18.04noarchlinux-aws-lts-18.04< 4.15.0.1140.140UNKNOWN
Ubuntu18.04noarchlinux-headers-aws-lts-18.04< 4.15.0.1140.140UNKNOWN
Ubuntu18.04noarchlinux-modules-extra-aws-lts-18.04< 4.15.0.1140.140UNKNOWN
Ubuntu18.04noarchlinux-tools-aws-lts-18.04< 4.15.0.1140.140UNKNOWN
Ubuntu18.04noarchlinux-image-4.15.0-1140-aws< 4.15.0-1140.151UNKNOWN
Ubuntu18.04noarchlinux-image-4.15.0-1140-aws-dbgsym< 4.15.0-1140.151UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	18.04	noarch	linux-image-aws-lts-18.04	< 4.15.0.1140.140	UNKNOWN
Ubuntu	18.04	noarch	linux-aws-lts-18.04	< 4.15.0.1140.140	UNKNOWN
Ubuntu	18.04	noarch	linux-headers-aws-lts-18.04	< 4.15.0.1140.140	UNKNOWN
Ubuntu	18.04	noarch	linux-modules-extra-aws-lts-18.04	< 4.15.0.1140.140	UNKNOWN
Ubuntu	18.04	noarch	linux-tools-aws-lts-18.04	< 4.15.0.1140.140	UNKNOWN
Ubuntu	18.04	noarch	linux-image-4.15.0-1140-aws	< 4.15.0-1140.151	UNKNOWN
Ubuntu	18.04	noarch	linux-image-4.15.0-1140-aws-dbgsym	< 4.15.0-1140.151	UNKNOWN