USN-4325-1

Dashboard / Vulnerabilities / USN-4325-1

USN-4325-1

Summary: linux-azure, linux-gcp, linux-gke-5.0, linux-oem-osp1, linux-oracle-5.0 vulnerabilities

Details: It was discovered that the IPMI message handler implementation in the Linux kernel did not properly deallocate memory in certain situations. A local attacker could use this to cause a denial of service (kernel memory exhaustion). (CVE-2019-19046) Al Viro discovered that the vfs layer in the Linux kernel contained a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2020-8428)

References: https://ubuntu.com/security/notices/USN-4325-1, https://ubuntu.com/security/CVE-2019-19046, https://ubuntu.com/security/CVE-2020-8428