USN-5207-1

Dashboard / Vulnerabilities / USN-5207-1

USN-5207-1

Summary: linux-oem-5.10 vulnerabilities

Details: Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. (CVE-2021-4002) It was discovered that the eBPF implementation in the Linux kernel contained a race condition around read-only maps. A privileged attacker could use this to modify read-only maps. (CVE-2021-4001) Luo Likang discovered that the FireDTV Firewire driver in the Linux kernel did not properly perform bounds checking in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-42739) It was discovered that the TIPC Protocol implementation in the Linux kernel did not properly validate MSG_CRYPTO messages in some situations. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-43267)

References: https://ubuntu.com/security/notices/USN-5207-1, https://ubuntu.com/security/CVE-2021-4001, https://ubuntu.com/security/CVE-2021-4002, https://ubuntu.com/security/CVE-2021-42739, https://ubuntu.com/security/CVE-2021-43267