USN-4945-1: Linux kernel vulnerabilities
It was discovered that the Nouveau GPU driver in the Linux kernel did not properly handle error conditions in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-25639) Jan Beulich discovered that the Xen netback backend in the Linux kernel did not properly handle certain error conditions under paravirtualization. An attacker in a guest VM could possibly use this to cause a denial of service (host domain crash). (CVE-2021-28038) It was discovered that the fastrpc driver in the Linux kernel did not prevent user space applications from sending kernel RPC messages. A local attacker could possibly use this to gain elevated privileges. (CVE-2021-28375) It was discovered that the Realtek RTL8188EU Wireless device driver in the Linux kernel did not properly validate ssid lengths in some situations. An attacker could use this to cause a denial of service (system crash). (CVE-2021-28660) It was discovered that the USB/IP driver in the Linux kernel contained race conditions during the update of local and shared status. An attacker could use this to cause a denial of service (system crash). (CVE-2021-29265) It was discovered that a race condition existed in the netfilter subsystem of the Linux kernel when replacing tables. A local attacker could use this to cause a denial of service (system crash). (CVE-2021-29650) Arnd Bergmann discovered that the video4linux subsystem in the Linux kernel did not properly deallocate memory in some situations. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-30002)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-4945-1?
The vulnerability USN-4945-1 has a high severity due to its potential to cause denial of service.
How do I fix USN-4945-1?
To fix USN-4945-1, update to the recommended Linux kernel versions for your system.
What versions of Ubuntu are affected by USN-4945-1?
USN-4945-1 affects Ubuntu 20.04 and 18.04 for specific kernel versions.
What causes the vulnerability in USN-4945-1?
USN-4945-1 is caused by improper error handling in the Nouveau GPU driver within the Linux kernel.
Who can exploit the vulnerability in USN-4945-1?
A local attacker with access to the system can exploit the vulnerability to trigger a denial of service.