USN-5140-1

Dashboard / Vulnerabilities / USN-5140-1

USN-5140-1

Summary: linux-oem-5.14 vulnerabilities

Details: It was discovered that the AMD Cryptographic Coprocessor (CCP) driver in the Linux kernel did not properly deallocate memory in some error conditions. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-3744, CVE-2021-3764) It was discovered that an integer overflow could be triggered in the eBPF implementation in the Linux kernel when preallocating objects for stack maps. A privileged local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2021-41864)

References: https://ubuntu.com/security/notices/USN-5140-1, https://ubuntu.com/security/CVE-2021-3744, https://ubuntu.com/security/CVE-2021-3764, https://ubuntu.com/security/CVE-2021-41864