USN-4708-1

    Dashboard / Vulnerabilities / USN-4708-1

    USN-4708-1

    Published: 28 Jan 2021Last Modified: 3 Jun 2026

    Summary: linux, linux-lts-xenial vulnerabilities

    Details: Wen Xu discovered that the XFS filesystem implementation in the Linux kernel did not properly track inode validations. An attacker could use this to construct a malicious XFS image that, when mounted, could cause a denial of service (system crash). (CVE-2018-13093) It was discovered that the btrfs file system implementation in the Linux kernel did not properly validate file system metadata in some situations. An attacker could use this to construct a malicious btrfs image that, when mounted, could cause a denial of service (system crash). (CVE-2019-19813, CVE-2019-19816) Bodong Zhao discovered a use-after-free in the Sun keyboard driver implementation in the Linux kernel. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2020-25669) Daniel Axtens discovered that PowerPC RTAS implementation in the Linux kernel did not properly restrict memory accesses in some situations. A privileged local attacker could use this to arbitrarily modify kernel memory, potentially bypassing kernel lockdown restrictions. (CVE-2020-27777)

    Affected packages

    Package

    Name: linux-lts-xenial

    Purl: pkg:deb/ubuntu/linux-lts-xenial?arch=source&distro=trusty%2Fesm

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.4.0-201.233~14.04.1

    Affected versions

    4.4.0-13.29~14.04.1
    4.4.0-14.30~14.04.2
    4.4.0-15.31~14.04.1
    4.4.0-18.34~14.04.1
    4.4.0-21.37~14.04.1
    4.4.0-22.39~14.04.1
    4.4.0-22.40~14.04.1
    4.4.0-24.43~14.04.1
    4.4.0-28.47~14.04.1
    4.4.0-31.50~14.04.1
    4.4.0-34.53~14.04.1
    4.4.0-36.55~14.04.1
    4.4.0-38.57~14.04.1
    4.4.0-42.62~14.04.1
    4.4.0-45.66~14.04.1
    4.4.0-47.68~14.04.1
    4.4.0-51.72~14.04.1
    4.4.0-53.74~14.04.1
    4.4.0-57.78~14.04.1
    4.4.0-59.80~14.04.1
    4.4.0-62.83~14.04.1
    4.4.0-63.84~14.04.2
    4.4.0-64.85~14.04.1
    4.4.0-66.87~14.04.1
    4.4.0-67.88~14.04.1
    4.4.0-70.91~14.04.1
    4.4.0-71.92~14.04.1
    4.4.0-72.93~14.04.1
    4.4.0-75.96~14.04.1
    4.4.0-78.99~14.04.2
    4.4.0-79.100~14.04.1
    4.4.0-81.104~14.04.1
    4.4.0-83.106~14.04.1
    4.4.0-87.110~14.04.1
    4.4.0-89.112~14.04.1
    4.4.0-91.114~14.04.1
    4.4.0-92.115~14.04.1
    4.4.0-93.116~14.04.1
    4.4.0-96.119~14.04.1
    4.4.0-97.120~14.04.1
    4.4.0-98.121~14.04.1
    4.4.0-101.124~14.04.1
    4.4.0-103.126~14.04.1
    4.4.0-104.127~14.04.1
    4.4.0-108.131~14.04.1
    4.4.0-109.132~14.04.1
    4.4.0-111.134~14.04.1
    4.4.0-112.135~14.04.1
    4.4.0-116.140~14.04.1
    4.4.0-119.143~14.04.1
    4.4.0-121.145~14.04.1
    4.4.0-124.148~14.04.1
    4.4.0-127.153~14.04.1
    4.4.0-128.154~14.04.1
    4.4.0-130.156~14.04.1
    4.4.0-131.157~14.04.1
    4.4.0-133.159~14.04.1
    4.4.0-134.160~14.04.1
    4.4.0-135.161~14.04.1
    4.4.0-137.163~14.04.1
    4.4.0-138.164~14.04.1
    4.4.0-139.165~14.04.1
    4.4.0-140.166~14.04.1
    4.4.0-141.167~14.04.1
    4.4.0-142.168~14.04.1
    4.4.0-143.169~14.04.2
    4.4.0-144.170~14.04.1
    4.4.0-146.172~14.04.1
    4.4.0-148.174~14.04.1
    4.4.0-150.176~14.04.1
    4.4.0-151.178~14.04.1
    4.4.0-154.181~14.04.1
    4.4.0-157.185~14.04.1
    4.4.0-159.187~14.04.1
    4.4.0-161.189~14.04.1
    4.4.0-164.192~14.04.1
    4.4.0-165.193~14.04.1
    4.4.0-166.195~14.04.1
    4.4.0-168.197~14.04.1
    4.4.0-169.198~14.04.1
    4.4.0-170.199~14.04.1
    4.4.0-171.200~14.04.1
    4.4.0-173.203~14.04.1
    4.4.0-174.204~14.04.1
    4.4.0-176.206~14.04.1
    4.4.0-177.207~14.04.1
    4.4.0-178.208~14.04.1
    4.4.0-179.209~14.04.1
    4.4.0-184.214~14.04.1
    4.4.0-185.215~14.04.1
    4.4.0-186.216~14.04.1
    4.4.0-187.217~14.04.1
    4.4.0-189.219~14.04.1
    4.4.0-190.220~14.04.1
    4.4.0-193.224~14.04.1
    4.4.0-194.226~14.04.1
    4.4.0-197.229~14.04.1
    4.4.0-198.230~14.04.1
    4.4.0-200.232~14.04.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    USN-4708-1 | CVE-DB