First published: Mon Jul 06 2020(Updated: )
It was discovered that the elf handling code in the Linux kernel did not initialize memory before using it in certain situations. A local attacker could use this to possibly expose sensitive information (kernel memory). (CVE-2020-10732) Matthew Sheets discovered that the SELinux network label handling implementation in the Linux kernel could be coerced into de-referencing a NULL pointer. A remote attacker could use this to cause a denial of service (system crash). (CVE-2020-10711) It was discovered that the SCSI generic (sg) driver in the Linux kernel did not properly handle certain error conditions correctly. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2020-12770) It was discovered that the USB Gadget device driver in the Linux kernel did not validate arguments passed from configfs in some situations. A local attacker could possibly use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2020-13143) It was discovered that the KVM implementation in the Linux kernel did not properly deallocate memory on initialization for some processors. A local attacker could possibly use this to cause a denial of service. (CVE-2020-12768)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-5.4.0-1013-raspi | <5.4.0-1013.13 | 5.4.0-1013.13 |
=20.04 | ||
All of | ||
ubuntu/linux-image-5.4.0-1018-aws | <5.4.0-1018.18 | 5.4.0-1018.18 |
=20.04 | ||
All of | ||
ubuntu/linux-image-5.4.0-1019-gcp | <5.4.0-1019.19 | 5.4.0-1019.19 |
=20.04 | ||
All of | ||
ubuntu/linux-image-5.4.0-1019-oracle | <5.4.0-1019.19 | 5.4.0-1019.19 |
=20.04 | ||
All of | ||
ubuntu/linux-image-5.4.0-1020-azure | <5.4.0-1020.20 | 5.4.0-1020.20 |
=20.04 | ||
All of | ||
ubuntu/linux-image-5.4.0-28-generic | <5.4.0-28.32 | 5.4.0-28.32 |
=20.04 | ||
All of | ||
ubuntu/linux-image-5.4.0-40-generic | <5.4.0-40.44 | 5.4.0-40.44 |
=20.04 | ||
All of | ||
ubuntu/linux-image-5.4.0-40-generic-lpae | <5.4.0-40.44 | 5.4.0-40.44 |
=20.04 | ||
All of | ||
ubuntu/linux-image-5.4.0-40-lowlatency | <5.4.0-40.44 | 5.4.0-40.44 |
=20.04 | ||
All of | ||
ubuntu/linux-image-aws | <5.4.0.1018.19 | 5.4.0.1018.19 |
=20.04 | ||
All of | ||
ubuntu/linux-image-azure | <5.4.0.1020.19 | 5.4.0.1020.19 |
=20.04 | ||
All of | ||
ubuntu/linux-image-gcp | <5.4.0.1019.17 | 5.4.0.1019.17 |
=20.04 | ||
All of | ||
ubuntu/linux-image-generic | <5.4.0.40.43 | 5.4.0.40.43 |
=20.04 | ||
All of | ||
ubuntu/linux-image-generic-lpae | <5.4.0.40.43 | 5.4.0.40.43 |
=20.04 | ||
All of | ||
ubuntu/linux-image-gke | <5.4.0.1019.17 | 5.4.0.1019.17 |
=20.04 | ||
All of | ||
ubuntu/linux-image-kvm | <5.4.0.1018.17 | 5.4.0.1018.17 |
=20.04 | ||
All of | ||
ubuntu/linux-image-lowlatency | <5.4.0.40.43 | 5.4.0.40.43 |
=20.04 | ||
All of | ||
ubuntu/linux-image-oem | <5.4.0.40.43 | 5.4.0.40.43 |
=20.04 | ||
All of | ||
ubuntu/linux-image-oem-osp1 | <5.4.0.40.43 | 5.4.0.40.43 |
=20.04 | ||
All of | ||
ubuntu/linux-image-oracle | <5.4.0.1019.17 | 5.4.0.1019.17 |
=20.04 | ||
All of | ||
ubuntu/linux-image-raspi | <5.4.0.1013.13 | 5.4.0.1013.13 |
=20.04 | ||
All of | ||
ubuntu/linux-image-raspi2 | <5.4.0.1013.13 | 5.4.0.1013.13 |
=20.04 | ||
All of | ||
ubuntu/linux-image-virtual | <5.4.0.40.43 | 5.4.0.40.43 |
=20.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
The vulnerability ID for this advisory is CVE-2020-10732.
The severity of CVE-2020-10732 is not mentioned in the advisory.
Ubuntu 20.04 is affected by this vulnerability.
To fix this vulnerability, update to Linux kernel version 5.4.0-1013.13 or later.
You can find more information about this vulnerability at the following URLs: [CVE-2020-13143](https://ubuntu.com/security/CVE-2020-13143), [CVE-2020-12768](https://ubuntu.com/security/CVE-2020-12768), [CVE-2020-10711](https://ubuntu.com/security/CVE-2020-10711).