UBUNTU-CVE-2021-47149: Medium severity ubuntu/linux-azure vulnerability

Q: What condition is required to trigger the failure?

The failure requires ioremap to fail while fmvj18x_get_hwinfo() is executing. In the affected path, the missing return-value check can lead to a NULL pointer dereference.

Q: What is the practical impact described for this issue?

The provided severity vector indicates an availability impact only, with high impact to availability and no stated impact to confidentiality or integrity.

Q: Which Ubuntu kernel package variants are listed as affected?

The listed software includes ubuntu/linux, ubuntu/linux-aws, ubuntu/linux-azure, ubuntu/linux-gcp, and their listed FIPS variants: ubuntu/linux-fips, ubuntu/linux-aws-fips, ubuntu/linux-azure-fips, and ubuntu/linux-gcp-fips.

Published Mar 25, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved: net: fujitsu: fix potential null-ptr-deref In fmvj18xgethwinfo(), if ioremap fails there will be NULL pointer deref. To fix this, check the return value of ioremap and return -1 to the caller in case of failure.

Affected Software

118 affected componentsFixes available

ubuntu/linux-azure<4.15.0-1121.134~14.04.1

4.15.0-1121.134~14.04.1

ubuntu/linux*

ubuntu/linux-aws<4.4.0-1148.154

4.4.0-1148.154

ubuntu/linux-lts-xenial<4.4.0-273.307~14.04.1

4.4.0-273.307~14.04.1

ubuntu/linux<4.4.0-273.307

4.4.0-273.307

ubuntu/linux-aws<4.4.0-1186.201

4.4.0-1186.201

ubuntu/linux-aws-hwe<4.15.0-1109.116~16.04.1

4.15.0-1109.116~16.04.1

ubuntu/linux-azure<4.15.0-1121.134~16.04.1

4.15.0-1121.134~16.04.1

ubuntu/linux-gcp<4.15.0-1106.120~16.04.1

4.15.0-1106.120~16.04.1

ubuntu/linux-hwe<4.15.0-151.157~16.04.1

4.15.0-151.157~16.04.1

ubuntu/linux-kvm<4.4.0-1149.160

4.4.0-1149.160

ubuntu/linux-oracle<4.15.0-1078.86~16.04.1

4.15.0-1078.86~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-fips<4.4.0-1119.126

4.4.0-1119.126

ubuntu/linux-fips*

ubuntu/linux<4.15.0-151.157

4.15.0-151.157

ubuntu/linux-aws<4.15.0-1109.116

4.15.0-1109.116

ubuntu/linux-aws-5.4<5.4.0-1054.57~18.04.1

5.4.0-1054.57~18.04.1

ubuntu/linux-azure-4.15<4.15.0-1121.134

4.15.0-1121.134

ubuntu/linux-azure-5.4<5.4.0-1055.57~18.04.1

5.4.0-1055.57~18.04.1

ubuntu/linux-gcp-4.15<4.15.0-1106.120

4.15.0-1106.120

ubuntu/linux-gcp-5.4<5.4.0-1049.53~18.04.1

5.4.0-1049.53~18.04.1

ubuntu/linux-hwe-5.4<5.4.0-80.90~18.04.1

5.4.0-80.90~18.04.1

ubuntu/linux-kvm<4.15.0-1097.99

4.15.0-1097.99

ubuntu/linux-oracle<4.15.0-1078.86

4.15.0-1078.86

ubuntu/linux-oracle-5.4<5.4.0-1052.56~18.04.1

5.4.0-1052.56~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1041.45~18.04.1

5.4.0-1041.45~18.04.1

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-fips<4.15.0-2051.53

4.15.0-2051.53

ubuntu/linux-azure-fips<4.15.0-2033.37

4.15.0-2033.37

ubuntu/linux-fips<4.15.0-1066.75

4.15.0-1066.75

ubuntu/linux-gcp-fips<4.15.0-2016.18

4.15.0-2016.18

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-80.90

5.4.0-80.90

ubuntu/linux-aws<5.4.0-1054.57

5.4.0-1054.57

ubuntu/linux-azure<5.4.0-1055.57

5.4.0-1055.57

ubuntu/linux-bluefield<5.4.0-1016.19

5.4.0-1016.19

ubuntu/linux-gcp<5.4.0-1049.53

5.4.0-1049.53

ubuntu/linux-gkeop<5.4.0-1021.22

5.4.0-1021.22

ubuntu/linux-kvm<5.4.0-1044.46

5.4.0-1044.46

ubuntu/linux-oracle<5.4.0-1052.56

5.4.0-1052.56

ubuntu/linux-raspi<5.4.0-1041.45

5.4.0-1041.45

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1069.73+fips2

5.4.0-1069.73+fips2

ubuntu/linux-azure-fips<5.4.0-1073.76+fips1

5.4.0-1073.76+fips1

ubuntu/linux-fips<5.4.0-1031.36

5.4.0-1031.36

ubuntu/linux-gcp-fips<5.4.0-1067.71~20.04.1

5.4.0-1067.71~20.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-nvidia-6.2*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-raspi-realtime*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1121.134~14.04.1
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1148.154
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-273.307~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-273.307
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1186.201
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1109.116~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1121.134~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1106.120~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-151.157~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1149.160
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1078.86~16.04.1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.4.0-1119.126
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-151.157
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1109.116
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1054.57~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1121.134
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1055.57~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1106.120
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1049.53~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-80.90~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1097.99
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1078.86
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1052.56~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1041.45~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2051.53
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2033.37
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1066.75
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2016.18
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-80.90
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1054.57
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1055.57
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1016.19
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1049.53
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1021.22
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1044.46
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1052.56
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1041.45
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1069.73+fips2
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1073.76+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1031.36
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1067.71~20.04.1
Configuration
In fmvj18x_get_hwinfo(), check whether ioremap returns NULL and return -1 to the caller if it fails.
Linux kernel fmvj18x driver ioremap return-value check = return -1 on failure

Event History

Mar 25, 2024

CVE Published

via OSV·09:15 AM

Data Sourced

via OSV·09:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What condition is required to trigger the failure?

The failure requires ioremap to fail while fmvj18x_get_hwinfo() is executing. In the affected path, the missing return-value check can lead to a NULL pointer dereference.

What is the practical impact described for this issue?

The provided severity vector indicates an availability impact only, with high impact to availability and no stated impact to confidentiality or integrity.

Which Ubuntu kernel package variants are listed as affected?

The listed software includes ubuntu/linux, ubuntu/linux-aws, ubuntu/linux-azure, ubuntu/linux-gcp, and their listed FIPS variants: ubuntu/linux-fips, ubuntu/linux-aws-fips, ubuntu/linux-azure-fips, and ubuntu/linux-gcp-fips.

UBUNTU-CVE-2021-47149: Medium severity ubuntu/linux-azure vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What condition is required to trigger the failure?

What is the practical impact described for this issue?

Which Ubuntu kernel package variants are listed as affected?

Company

Resources

Contact

Frequently Asked Questions

What condition is required to trigger the failure?

What is the practical impact described for this issue?

Which Ubuntu kernel package variants are listed as affected?