USN-4392-1: Linux kernel vulnerabilities
First published: Wed Jun 10 2020(Updated: )
It was discovered that the Marvell WiFi-Ex Driver in the Linux kernel did not properly validate status lengths in messages received from an access point, leading to a buffer overflow. A physically proximate attacker controlling an access point could use this to construct messages that could possibly result in arbitrary code execution. (CVE-2020-12654) It was discovered that memory contents previously stored in microarchitectural special registers after RDRAND, RDSEED, and SGX EGETKEY read operations on Intel client and Xeon E3 processors may be briefly exposed to processes on the same or different processor cores. A local attacker could use this to expose sensitive information. (CVE-2020-0543) Piotr Krysiuk discovered that race conditions existed in the file system implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-12114)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-server | <3.13.0.180.189 | 3.13.0.180.189 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-powerpc-e500mc | <3.13.0.180.189 | 3.13.0.180.189 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-3.13.0-180-powerpc64-smp | <3.13.0-180.231 | 3.13.0-180.231 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-3.13.0-180-powerpc-e500mc | <3.13.0-180.231 | 3.13.0-180.231 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-3.13.0-180-generic | <3.13.0-180.231 | 3.13.0-180.231 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-virtual | <3.13.0.180.189 | 3.13.0.180.189 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-powerpc-e500 | <3.13.0.180.189 | 3.13.0.180.189 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-omap | <3.13.0.180.189 | 3.13.0.180.189 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-3.13.0-180-powerpc-e500 | <3.13.0-180.231 | 3.13.0-180.231 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-3.13.0-180-generic-lpae | <3.13.0-180.231 | 3.13.0-180.231 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-3.13.0-180-powerpc-smp | <3.13.0-180.231 | 3.13.0-180.231 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-3.13.0-180-lowlatency | <3.13.0-180.231 | 3.13.0-180.231 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-generic | <3.13.0.180.189 | 3.13.0.180.189 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-highbank | <3.13.0.180.189 | 3.13.0.180.189 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-powerpc-smp | <3.13.0.180.189 | 3.13.0.180.189 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae | <3.13.0.180.189 | 3.13.0.180.189 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-3.13.0-180-powerpc64-emb | <3.13.0-180.231 | 3.13.0-180.231 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-powerpc64-emb | <3.13.0.180.189 | 3.13.0.180.189 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-powerpc64-smp | <3.13.0.180.189 | 3.13.0.180.189 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency | <3.13.0.180.189 | 3.13.0.180.189 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-3.13.0-180-generic-lpae | <3.13.0-180.231~12.04.1 | 3.13.0-180.231~12.04.1 |
| =12.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae-lts-trusty | <3.13.0.180.166 | 3.13.0.180.166 |
| =12.04 | ||
| All of | ||
| ubuntu/linux-image-3.13.0-180-lowlatency | <3.13.0-180.231~12.04.1 | 3.13.0-180.231~12.04.1 |
| =12.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lts-trusty | <3.13.0.180.166 | 3.13.0.180.166 |
| =12.04 | ||
| All of | ||
| ubuntu/linux-image-3.13.0-180-generic | <3.13.0-180.231~12.04.1 | 3.13.0-180.231~12.04.1 |
| =12.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2020-0543
- https://ubuntu.com/security/CVE-2020-12114
- https://ubuntu.com/security/CVE-2020-12654
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SRBDS
- https://ubuntu.com/security/notices/USN-4387-1
- https://ubuntu.com/security/notices/USN-4391-1
- https://ubuntu.com/security/notices/USN-4390-1
- https://ubuntu.com/security/notices/USN-4385-1
- https://ubuntu.com/security/notices/USN-4389-1
- https://ubuntu.com/security/notices/USN-4388-1
- https://ubuntu.com/security/notices/USN-4393-1
- https://ubuntu.com/security/notices/LSN-0068-1
- https://ubuntu.com/security/notices/USN-5617-1
- https://ubuntu.com/security/notices/LSN-0072-1
- https://launchpad.net/ubuntu/+source/linux/3.13.0-180.231
- https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-180.231~12.04.1
- https://ubuntu.com/security/notices/USN-4392-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for this Linux kernel vulnerability?
The vulnerability ID for this Linux kernel vulnerability is USN-4392-1.
What is the severity of the USN-4392-1 vulnerability?
The severity of the USN-4392-1 vulnerability is not specified in the provided information.
How can an attacker exploit the USN-4392-1 vulnerability?
A physically proximate attacker controlling an access point could use this vulnerability to construct malicious messages, leading to a possible buffer overflow.
Which Linux kernel versions are affected by the USN-4392-1 vulnerability?
The USN-4392-1 vulnerability affects Ubuntu 14.04 with various Linux kernel versions, including 3.13.0.180.189 and 3.13.0-180.231.
Are there any remedies or patches available for the USN-4392-1 vulnerability?
Yes, the Ubuntu Security Team has provided remedies for the USN-4392-1 vulnerability with specific Linux kernel versions, such as 3.13.0.180.189 and 3.13.0-180.231.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- collector/usn
- source/Ubuntu
- anchor-related/USN-4387-1
- anchor-related/USN-4391-1
- anchor-related/USN-4390-1
- anchor-related/USN-4385-1
- anchor-related/USN-4389-1
- anchor-related/USN-4388-1
- anchor-related/USN-4393-1
- anchor-related/USN-5617-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/14.04
- version/ubuntu ubuntu/12.04