USN-5091-2

Dashboard / Vulnerabilities / USN-5091-2

USN-5091-2

Summary: linux-raspi, linux-raspi-5.4 vulnerabilities

Details: Ofek Kirzner, Adam Morrison, Benedict Schlueter, and Piotr Krysiuk discovered that the BPF verifier in the Linux kernel missed possible mispredicted branches due to type confusion, allowing a side-channel attack. An attacker could use this to expose sensitive information. (CVE-2021-33624) It was discovered that the tracing subsystem in the Linux kernel did not properly keep track of per-cpu ring buffer state. A privileged attacker could use this to cause a denial of service. (CVE-2021-3679) It was discovered that the Virtio console implementation in the Linux kernel did not properly validate input lengths in some situations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-38160) Michael Wakabayashi discovered that the NFSv4 client implementation in the Linux kernel did not properly order connection setup operations. An attacker controlling a remote NFS server could use this to cause a denial of service on the client. (CVE-2021-38199) It was discovered that the MAX-3421 host USB device driver in the Linux kernel did not properly handle device removal events. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2021-38204)

References: https://ubuntu.com/security/notices/USN-5091-2, https://ubuntu.com/security/CVE-2021-3679, https://ubuntu.com/security/CVE-2021-33624, https://ubuntu.com/security/CVE-2021-38160, https://ubuntu.com/security/CVE-2021-38199, https://ubuntu.com/security/CVE-2021-38204