USN-5073-3

Dashboard / Vulnerabilities / USN-5073-3

USN-5073-3

Summary: linux-raspi2 vulnerabilities

Details: Norbert Slusarek discovered that the CAN broadcast manger (bcm) protocol implementation in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2021-34693) Murray McAllister discovered that the joystick device interface in the Linux kernel did not properly validate data passed via an ioctl(). A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code on systems with a joystick device registered. (CVE-2021-3612) It was discovered that the Virtio console implementation in the Linux kernel did not properly validate input lengths in some situations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-38160)

References: https://ubuntu.com/security/notices/USN-5073-3, https://ubuntu.com/security/CVE-2021-3612, https://ubuntu.com/security/CVE-2021-34693, https://ubuntu.com/security/CVE-2021-38160