USN-5003-1: Linux kernel vulnerabilities
First published: Wed Jun 23 2021(Updated: )
Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code. (CVE-2021-3609) It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code. (CVE-2021-3600) Or Cohen discovered that the SCTP implementation in the Linux kernel contained a race condition in some situations, leading to a use-after-free condition. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-23133)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-4.15.0-1022-dell300x | <4.15.0-1022.26 | 4.15.0-1022.26 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1075-oracle | <4.15.0-1075.83 | 4.15.0-1075.83 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1089-raspi2 | <4.15.0-1089.94 | 4.15.0-1089.94 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1103-gcp | <4.15.0-1103.116 | 4.15.0-1103.116 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1106-aws | <4.15.0-1106.113 | 4.15.0-1106.113 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1106-snapdragon | <4.15.0-1106.115 | 4.15.0-1106.115 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1118-azure | <4.15.0-1118.131 | 4.15.0-1118.131 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-147-generic | <4.15.0-147.151 | 4.15.0-147.151 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-147-generic-lpae | <4.15.0-147.151 | 4.15.0-147.151 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-147-lowlatency | <4.15.0-147.151 | 4.15.0-147.151 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-aws-lts-18.04 | <4.15.0.1106.109 | 4.15.0.1106.109 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-azure-lts-18.04 | <4.15.0.1118.91 | 4.15.0.1118.91 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-dell300x | <4.15.0.1022.24 | 4.15.0.1022.24 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-gcp-lts-18.04 | <4.15.0.1103.121 | 4.15.0.1103.121 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-generic | <4.15.0.147.134 | 4.15.0.147.134 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae | <4.15.0.147.134 | 4.15.0.147.134 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency | <4.15.0.147.134 | 4.15.0.147.134 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-oracle-lts-18.04 | <4.15.0.1075.85 | 4.15.0.1075.85 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-raspi2 | <4.15.0.1089.86 | 4.15.0.1089.86 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-snapdragon | <4.15.0.1106.109 | 4.15.0.1106.109 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-virtual | <4.15.0.147.134 | 4.15.0.147.134 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1075-oracle | <4.15.0-1075.83~16.04.1 | 4.15.0-1075.83~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1103-gcp | <4.15.0-1103.116~16.04.1 | 4.15.0-1103.116~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1106-aws | <4.15.0-1106.113~16.04.1 | 4.15.0-1106.113~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1118-azure | <4.15.0-1118.131~16.04.1 | 4.15.0-1118.131~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-147-generic | <4.15.0-147.151~16.04.1 | 4.15.0-147.151~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-147-lowlatency | <4.15.0-147.151~16.04.1 | 4.15.0-147.151~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-aws-hwe | <4.15.0.1106.97 | 4.15.0.1106.97 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-azure | <4.15.0.1118.109 | 4.15.0.1118.109 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-gcp | <4.15.0.1103.104 | 4.15.0.1103.104 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-generic-hwe-16.04 | <4.15.0.147.143 | 4.15.0.147.143 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-gke | <4.15.0.1103.104 | 4.15.0.1103.104 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency-hwe-16.04 | <4.15.0.147.143 | 4.15.0.147.143 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-oem | <4.15.0.147.143 | 4.15.0.147.143 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-oracle | <4.15.0.1075.63 | 4.15.0.1075.63 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-virtual-hwe-16.04 | <4.15.0.147.143 | 4.15.0.147.143 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1118-azure | <4.15.0-1118.131~14.04.1 | 4.15.0-1118.131~14.04.1 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-azure | <4.15.0.1118.91 | 4.15.0.1118.91 |
| =14.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2021-23133
- https://ubuntu.com/security/CVE-2021-3609
- https://ubuntu.com/security/CVE-2021-3600
- https://ubuntu.com/security/notices/USN-4997-1
- https://ubuntu.com/security/notices/USN-4999-1
- https://ubuntu.com/security/notices/USN-5000-1
- https://ubuntu.com/security/notices/USN-5001-1
- https://ubuntu.com/security/notices/USN-5000-2
- https://ubuntu.com/security/notices/USN-4997-2
- https://ubuntu.com/security/notices/USN-5002-1
- https://ubuntu.com/security/notices/LSN-0078-1
- https://ubuntu.com/security/notices/USN-5082-1
- https://ubuntu.com/security/notices/USN-5505-1
- https://ubuntu.com/security/notices/USN-5513-1
- https://ubuntu.com/security/notices/LSN-0079-1
- https://launchpad.net/ubuntu/+source/linux-signed-dell300x/4.15.0-1022.26
- https://launchpad.net/ubuntu/+source/linux-signed-oracle/4.15.0-1075.83
- https://launchpad.net/ubuntu/+source/linux-raspi2/4.15.0-1089.94
- https://launchpad.net/ubuntu/+source/linux-signed-gcp-4.15/4.15.0-1103.116
- https://launchpad.net/ubuntu/+source/linux-aws/4.15.0-1106.113
- https://launchpad.net/ubuntu/+source/linux-snapdragon/4.15.0-1106.115
- https://launchpad.net/ubuntu/+source/linux-signed-azure-4.15/4.15.0-1118.131
- https://launchpad.net/ubuntu/+source/linux-signed/4.15.0-147.151
- https://launchpad.net/ubuntu/+source/linux/4.15.0-147.151
- https://launchpad.net/ubuntu/+source/linux-meta-aws/4.15.0.1106.109
- https://launchpad.net/ubuntu/+source/linux-meta-azure-4.15/4.15.0.1118.91
- https://launchpad.net/ubuntu/+source/linux-meta-dell300x/4.15.0.1022.24
- https://launchpad.net/ubuntu/+source/linux-meta-gcp-4.15/4.15.0.1103.121
- https://launchpad.net/ubuntu/+source/linux-meta/4.15.0.147.134
- https://launchpad.net/ubuntu/+source/linux-meta-oracle/4.15.0.1075.85
- https://launchpad.net/ubuntu/+source/linux-meta-raspi2/4.15.0.1089.86
- https://launchpad.net/ubuntu/+source/linux-meta-snapdragon/4.15.0.1106.109
- https://ubuntu.com/security/notices/USN-5003-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- collector/usn
- source/Ubuntu
- anchor-related/USN-4997-1
- anchor-related/USN-4999-1
- anchor-related/USN-5000-1
- anchor-related/USN-5001-1
- anchor-related/USN-5000-2
- anchor-related/USN-4997-2
- anchor-related/USN-5002-1
- anchor-related/USN-5082-1
- anchor-related/USN-5505-1
- anchor-related/USN-5513-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04
- version/ubuntu ubuntu/14.04