USN-5117-1

Dashboard / Vulnerabilities / USN-5117-1

USN-5117-1

Summary: linux-oem-5.13 vulnerabilities

Details: It was discovered that the btrfs file system in the Linux kernel did not properly handle removing a non-existent device id. An attacker with CAP_SYS_ADMIN could use this to cause a denial of service. (CVE-2021-3739) It was discovered that the Qualcomm IPC Router protocol implementation in the Linux kernel did not properly validate metadata in some situations. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information. (CVE-2021-3743) It was discovered that the virtual terminal (vt) device implementation in the Linux kernel contained a race condition in its ioctl handling that led to an out-of-bounds read vulnerability. A local attacker could possibly use this to expose sensitive information. (CVE-2021-3753) It was discovered that the Linux kernel did not properly account for the memory usage of certain IPC objects. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-3759)

References: https://ubuntu.com/security/notices/USN-5117-1, https://ubuntu.com/security/CVE-2021-3739, https://ubuntu.com/security/CVE-2021-3743, https://ubuntu.com/security/CVE-2021-3753, https://ubuntu.com/security/CVE-2021-3759