USN-4626-1: Linux kernel vulnerabilities

Q: Does exploiting either issue require local access?

Yes. Both issues are described as exploitable by a local attacker; the provided information does not describe a remote attack path.

Q: Which kernel image variants are identified in this advisory?

The listed affected images include raspi, raspi-nolpae, kvm, oracle, gcp, azure, and aws variants in the Ubuntu 5.8.0 kernel package series.

Q: How can I determine whether a system is in scope?

Check whether the system uses one of the listed Ubuntu kernel image packages. The provided data does not include fixed package versions or other configuration-based detection criteria.

Published Nov 11, 2020

Updated

Simon Scannell discovered that the bpf verifier in the Linux kernel did not properly calculate register bounds for certain operations. A local attacker could use this to expose sensitive information (kernel memory) or gain administrative privileges. (CVE-2020-27194) Moritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Catherine Easdon, Claudio Canella, and Daniel Gruss discovered that the Intel Running Average Power Limit (RAPL) driver in the Linux kernel did not properly restrict access to power data. A local attacker could possibly use this to expose sensitive information. (CVE-2020-8694)

Affected Software

50 affected componentsFixes available

All of the following

ubuntu/linux-image-5.8.0-1007-raspi<5.8.0-1007.10

5.8.0-1007.10

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-5.8.0-1007-raspi-nolpae<5.8.0-1007.10

5.8.0-1007.10

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-5.8.0-1009-kvm<5.8.0-1009.10

5.8.0-1009.10

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-5.8.0-1010-oracle<5.8.0-1010.10

5.8.0-1010.10

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-5.8.0-1011-gcp<5.8.0-1011.11

5.8.0-1011.11

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-5.8.0-1012-azure<5.8.0-1012.13

5.8.0-1012.13

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-5.8.0-1013-aws<5.8.0-1013.14

5.8.0-1013.14

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-5.8.0-28-generic<5.8.0-28.30

5.8.0-28.30

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-5.8.0-28-generic-64k<5.8.0-28.30

5.8.0-28.30

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-5.8.0-28-generic-lpae<5.8.0-28.30

5.8.0-28.30

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-5.8.0-28-lowlatency<5.8.0-28.30

5.8.0-28.30

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-aws<5.8.0.1013.15

5.8.0.1013.15

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-azure<5.8.0.1012.12

5.8.0.1012.12

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-gcp<5.8.0.1011.11

5.8.0.1011.11

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-generic<5.8.0.28.33

5.8.0.28.33

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-generic-64k<5.8.0.28.33

5.8.0.28.33

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-generic-lpae<5.8.0.28.33

5.8.0.28.33

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-gke<5.8.0.1011.11

5.8.0.1011.11

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-kvm<5.8.0.1009.10

5.8.0.1009.10

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-lowlatency<5.8.0.28.33

5.8.0.28.33

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-oem-20.04<5.8.0.28.33

5.8.0.28.33

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-oracle<5.8.0.1010.10

5.8.0.1010.10

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-raspi<5.8.0.1007.10

5.8.0.1007.10

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-raspi-nolpae<5.8.0.1007.10

5.8.0.1007.10

Ubuntu Ubuntu=20.10

All of the following

ubuntu/linux-image-virtual<5.8.0.28.33

5.8.0.28.33

Ubuntu Ubuntu=20.10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-image-5.8.0-1007-raspi to a version that resolves this vulnerability.
Fixed in 5.8.0-1007.10
Upgrade
Upgrade ubuntu/linux-image-5.8.0-1007-raspi-nolpae to a version that resolves this vulnerability.
Fixed in 5.8.0-1007.10
Upgrade
Upgrade ubuntu/linux-image-5.8.0-1009-kvm to a version that resolves this vulnerability.
Fixed in 5.8.0-1009.10
Upgrade
Upgrade ubuntu/linux-image-5.8.0-1010-oracle to a version that resolves this vulnerability.
Fixed in 5.8.0-1010.10
Upgrade
Upgrade ubuntu/linux-image-5.8.0-1011-gcp to a version that resolves this vulnerability.
Fixed in 5.8.0-1011.11
Upgrade
Upgrade ubuntu/linux-image-5.8.0-1012-azure to a version that resolves this vulnerability.
Fixed in 5.8.0-1012.13
Upgrade
Upgrade ubuntu/linux-image-5.8.0-1013-aws to a version that resolves this vulnerability.
Fixed in 5.8.0-1013.14
Upgrade
Upgrade ubuntu/linux-image-5.8.0-28-generic to a version that resolves this vulnerability.
Fixed in 5.8.0-28.30
Upgrade
Upgrade ubuntu/linux-image-5.8.0-28-generic-64k to a version that resolves this vulnerability.
Fixed in 5.8.0-28.30
Upgrade
Upgrade ubuntu/linux-image-5.8.0-28-generic-lpae to a version that resolves this vulnerability.
Fixed in 5.8.0-28.30
Upgrade
Upgrade ubuntu/linux-image-5.8.0-28-lowlatency to a version that resolves this vulnerability.
Fixed in 5.8.0-28.30
Upgrade
Upgrade ubuntu/linux-image-aws to a version that resolves this vulnerability.
Fixed in 5.8.0.1013.15
Upgrade
Upgrade ubuntu/linux-image-azure to a version that resolves this vulnerability.
Fixed in 5.8.0.1012.12
Upgrade
Upgrade ubuntu/linux-image-gcp to a version that resolves this vulnerability.
Fixed in 5.8.0.1011.11
Upgrade
Upgrade ubuntu/linux-image-generic to a version that resolves this vulnerability.
Fixed in 5.8.0.28.33
Upgrade
Upgrade ubuntu/linux-image-generic-64k to a version that resolves this vulnerability.
Fixed in 5.8.0.28.33
Upgrade
Upgrade ubuntu/linux-image-generic-lpae to a version that resolves this vulnerability.
Fixed in 5.8.0.28.33
Upgrade
Upgrade ubuntu/linux-image-gke to a version that resolves this vulnerability.
Fixed in 5.8.0.1011.11
Upgrade
Upgrade ubuntu/linux-image-kvm to a version that resolves this vulnerability.
Fixed in 5.8.0.1009.10
Upgrade
Upgrade ubuntu/linux-image-lowlatency to a version that resolves this vulnerability.
Fixed in 5.8.0.28.33
Upgrade
Upgrade ubuntu/linux-image-oem-20.04 to a version that resolves this vulnerability.
Fixed in 5.8.0.28.33
Upgrade
Upgrade ubuntu/linux-image-oracle to a version that resolves this vulnerability.
Fixed in 5.8.0.1010.10
Upgrade
Upgrade ubuntu/linux-image-raspi to a version that resolves this vulnerability.
Fixed in 5.8.0.1007.10
Upgrade
Upgrade ubuntu/linux-image-raspi-nolpae to a version that resolves this vulnerability.
Fixed in 5.8.0.1007.10
Upgrade
Upgrade ubuntu/linux-image-virtual to a version that resolves this vulnerability.
Fixed in 5.8.0.28.33
Compensating control
Restrict access to power data to prevent unauthorized local users from accessing it.

Event History

Nov 11, 2020

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Does exploiting either issue require local access?

Yes. Both issues are described as exploitable by a local attacker; the provided information does not describe a remote attack path.

Which kernel image variants are identified in this advisory?

The listed affected images include raspi, raspi-nolpae, kvm, oracle, gcp, azure, and aws variants in the Ubuntu 5.8.0 kernel package series.

How can I determine whether a system is in scope?

Check whether the system uses one of the listed Ubuntu kernel image packages. The provided data does not include fixed package versions or other configuration-based detection criteria.

USN-4626-1: Linux kernel vulnerabilities

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Does exploiting either issue require local access?

Which kernel image variants are identified in this advisory?

How can I determine whether a system is in scope?

Company

Resources

Contact

Frequently Asked Questions

Does exploiting either issue require local access?

Which kernel image variants are identified in this advisory?

How can I determine whether a system is in scope?