USN-5209-1

    Dashboard / Vulnerabilities / USN-5209-1

    USN-5209-1

    Published: 6 Jan 2022Last Modified: 9 Sept 2026

    Summary: linux, linux-aws, linux-aws-hwe, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

    Details: Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. (CVE-2021-4002) It was discovered that a race condition existed in the timer implementation in the Linux kernel. A privileged attacker could use this to cause a denial of service. (CVE-2021-20317) It was discovered that a race condition existed in the overlay file system implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2021-20321) It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface (NCI) implementation. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2021-3760) It was discovered that an integer overflow could be triggered in the eBPF implementation in the Linux kernel when preallocating objects for stack maps. A privileged local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2021-41864) It was discovered that the ISDN CAPI implementation in the Linux kernel contained a race condition in certain situations that could trigger an array out-of-bounds bug. A privileged local attacker could possibly use this to cause a denial of service or execute arbitrary code. (CVE-2021-43389)

    References: https://ubuntu.com/security/notices/USN-5209-1, https://ubuntu.com/security/CVE-2021-3760, https://ubuntu.com/security/CVE-2021-4002, https://ubuntu.com/security/CVE-2021-20317, https://ubuntu.com/security/CVE-2021-20321, https://ubuntu.com/security/CVE-2021-41864, https://ubuntu.com/security/CVE-2021-43389

    Affected packages

    Package

    Name: linux-azure

    Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=trusty%2Fesm

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.15.0-1129.142~14.04.1

    Affected versions

    4.15.0-1023.24~14.04.1
    4.15.0-1030.31~14.04.1
    4.15.0-1031.32~14.04.1
    4.15.0-1032.33~14.04.2
    4.15.0-1035.36~14.04.2
    4.15.0-1036.38~14.04.2
    4.15.0-1037.39~14.04.2
    4.15.0-1039.41~14.04.2
    4.15.0-1040.44~14.04.1
    4.15.0-1041.45~14.04.1
    4.15.0-1042.46~14.04.1
    4.15.0-1045.49~14.04.1
    4.15.0-1046.50~14.04.1
    4.15.0-1047.51~14.04.1
    4.15.0-1049.54~14.04.1
    4.15.0-1050.55~14.04.1
    4.15.0-1051.56~14.04.1
    4.15.0-1052.57~14.04.1
    4.15.0-1055.60~14.04.1
    4.15.0-1056.61~14.04.1
    4.15.0-1057.62~14.04.1
    4.15.0-1059.64~14.04.1
    4.15.0-1060.65~14.04.1
    4.15.0-1061.66~14.04.1
    4.15.0-1063.68~14.04.1
    4.15.0-1064.69~14.04.1
    4.15.0-1066.71~14.04.1
    4.15.0-1067.72~14.04.1
    4.15.0-1069.74~14.04.1
    4.15.0-1071.76~14.04.1
    4.15.0-1074.79~14.04.1
    4.15.0-1077.82~14.04.1
    4.15.0-1082.92~14.04.1
    4.15.0-1083.93~14.04.1
    4.15.0-1089.99~14.04.1
    4.15.0-1091.101~14.04.1
    4.15.0-1092.102~14.04.1
    4.15.0-1093.103~14.04.1
    4.15.0-1095.105~14.04.1
    4.15.0-1096.106~14.04.1
    4.15.0-1098.109~14.04.1
    4.15.0-1100.111~14.04.1
    4.15.0-1102.113~14.04.1
    4.15.0-1103.114~14.04.1
    4.15.0-1106.118~14.04.1
    4.15.0-1108.120~14.04.1
    4.15.0-1109.121~14.04.1
    4.15.0-1110.122~14.04.1
    4.15.0-1111.123~14.04.1
    4.15.0-1112.124~14.04.1
    4.15.0-1113.126~14.04.1
    4.15.0-1114.127~14.04.1
    4.15.0-1115.128~14.04.1
    4.15.0-1118.131~14.04.1
    4.15.0-1121.134~14.04.1
    4.15.0-1122.135~14.04.1
    4.15.0-1123.136~14.04.1
    4.15.0-1124.137~14.04.1
    4.15.0-1125.138~14.04.1
    4.15.0-1126.139~14.04.1
    4.15.0-1127.140~14.04.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    USN-5209-1 | CVE-DB