USN-5070-1: Linux kernel vulnerabilities

Published Sep 8, 2021
·
Updated

Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel allowed a guest VM to disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a guest VM could use this to read or write portions of the host's physical memory. (CVE-2021-3656) Maxim Levitsky discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel did not properly prevent a guest VM from enabling AVIC in nested guest VMs. An attacker in a guest VM could use this to write to portions of the host's physical memory. (CVE-2021-3653) It was discovered that the Linux kernel did not properly enforce certain types of entries in the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. An attacker could use this to bypass UEFI Secure Boot restrictions. (CVE-2020-26541) It was discovered that the KVM hypervisor implementation in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. An attacker who could start and control a VM could possibly use this to expose sensitive information or execute arbitrary code. (CVE-2021-22543) Norbert Slusarek discovered that the CAN broadcast manger (bcm) protocol implementation in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2021-34693) Murray McAllister discovered that the joystick device interface in the Linux kernel did not properly validate data passed via an ioctl(). A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code on systems with a joystick device registered. (CVE-2021-3612) It was discovered that the KVM hypervisor implementation in the Linux kernel did not properly compute the access permissions for shadow pages in some situations. A local attacker could use this to cause a denial of service. (CVE-2021-38198) It was discovered that the perf subsystem in the Linux kernel for the PowerPC architecture contained a null pointer dereference in some situations. An attacker could use this to cause a denial of service (system crash). (CVE-2021-38200) Ben Greear discovered that the mac80211 subsystem in the Linux kernel contained a null pointer dereference in some situations. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-38206) It was discovered that the Xilinx LL TEMAC device driver in the Linux kernel did not properly calculate the number of buffers to be used in certain situations. A remote attacker could use this to cause a denial of service (system crash). (CVE-2021-38207)

Affected Software

79 affected componentsFixes available
Ubuntu Linux kernel
All of the following
ubuntu/linux-image-5.11.0-34-generic<5.11.0-34.36
5.11.0-34.36
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-5.11.0-34-lowlatency<5.11.0-34.36
5.11.0-34.36
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-virtual<5.11.0.34.36
5.11.0.34.36
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-5.11.0-1017-aws<5.11.0-1017.18
5.11.0-1017.18
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-generic<5.11.0.34.36
5.11.0.34.36
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-aws<5.11.0.1017.18
5.11.0.1017.18
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-5.11.0-1015-kvm<5.11.0-1015.16
5.11.0-1015.16
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-5.11.0-1017-raspi<5.11.0-1017.18
5.11.0-1017.18
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-5.11.0-1017-oracle<5.11.0-1017.18
5.11.0-1017.18
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-5.11.0-34-generic-lpae<5.11.0-34.36
5.11.0-34.36
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-5.11.0-1017-raspi-nolpae<5.11.0-1017.18
5.11.0-1017.18
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-azure<5.11.0.1015.16
5.11.0.1015.16
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-raspi-nolpae<5.11.0.1017.15
5.11.0.1017.15
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-oem-20.04<5.11.0.34.36
5.11.0.34.36
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-gke<5.11.0.1018.18
5.11.0.1018.18
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-gcp<5.11.0.1018.18
5.11.0.1018.18
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-5.11.0-1018-gcp<5.11.0-1018.20
5.11.0-1018.20
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-oracle<5.11.0.1017.18
5.11.0.1017.18
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-raspi<5.11.0.1017.15
5.11.0.1017.15
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-5.11.0-34-generic-64k<5.11.0-34.36
5.11.0-34.36
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-5.11.0-1015-azure<5.11.0-1015.16
5.11.0-1015.16
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-kvm<5.11.0.1015.16
5.11.0.1015.16
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-generic-lpae<5.11.0.34.36
5.11.0.34.36
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-generic-64k<5.11.0.34.36
5.11.0.34.36
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-lowlatency<5.11.0.34.36
5.11.0.34.36
Ubuntu Ubuntu=21.04
All of the following
ubuntu/linux-image-5.11.0-34-generic<5.11.0-34.36~20.04.1
5.11.0-34.36~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.11.0-1017-aws<5.11.0-1017.18~20.04.1
5.11.0-1017.18~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-aws<5.11.0.1017.18~20.04.16
5.11.0.1017.18~20.04.16
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-lowlatency-hwe-20.04<5.11.0.34.36~20.04.13
5.11.0.34.36~20.04.13
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.11.0-1017-oracle<5.11.0-1017.18~20.04.1
5.11.0-1017.18~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.11.0-34-generic-lpae<5.11.0-34.36~20.04.1
5.11.0-34.36~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-generic-hwe-20.04<5.11.0.34.36~20.04.13
5.11.0.34.36~20.04.13
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.11.0-34-lowlatency<5.11.0-34.36~20.04.1
5.11.0-34.36~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.11.0-34-generic-64k<5.11.0-34.36~20.04.1
5.11.0-34.36~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-oracle<5.11.0.1017.18~20.04.10
5.11.0.1017.18~20.04.10
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-generic-lpae-hwe-20.04<5.11.0.34.36~20.04.13
5.11.0.34.36~20.04.13
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-generic-64k-hwe-20.04<5.11.0.34.36~20.04.13
5.11.0.34.36~20.04.13
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.11.0-1015-azure<5.11.0-1015.16~20.04.1
5.11.0-1015.16~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-virtual-hwe-20.04<5.11.0.34.36~20.04.13
5.11.0.34.36~20.04.13
Ubuntu Ubuntu=20.04

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-34-generic to a version that resolves this vulnerability.

    Fixed in 5.11.0-34.36
  2. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-34-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.11.0-34.36
  3. Upgrade

    Upgrade ubuntu/linux-image-virtual to a version that resolves this vulnerability.

    Fixed in 5.11.0.34.36
  4. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-1017-aws to a version that resolves this vulnerability.

    Fixed in 5.11.0-1017.18
  5. Upgrade

    Upgrade ubuntu/linux-image-generic to a version that resolves this vulnerability.

    Fixed in 5.11.0.34.36
  6. Upgrade

    Upgrade ubuntu/linux-image-aws to a version that resolves this vulnerability.

    Fixed in 5.11.0.1017.18
  7. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-1015-kvm to a version that resolves this vulnerability.

    Fixed in 5.11.0-1015.16
  8. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-1017-raspi to a version that resolves this vulnerability.

    Fixed in 5.11.0-1017.18
  9. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-1017-oracle to a version that resolves this vulnerability.

    Fixed in 5.11.0-1017.18
  10. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-34-generic-lpae to a version that resolves this vulnerability.

    Fixed in 5.11.0-34.36
  11. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-1017-raspi-nolpae to a version that resolves this vulnerability.

    Fixed in 5.11.0-1017.18
  12. Upgrade

    Upgrade ubuntu/linux-image-azure to a version that resolves this vulnerability.

    Fixed in 5.11.0.1015.16
  13. Upgrade

    Upgrade ubuntu/linux-image-raspi-nolpae to a version that resolves this vulnerability.

    Fixed in 5.11.0.1017.15
  14. Upgrade

    Upgrade ubuntu/linux-image-oem-20.04 to a version that resolves this vulnerability.

    Fixed in 5.11.0.34.36
  15. Upgrade

    Upgrade ubuntu/linux-image-gke to a version that resolves this vulnerability.

    Fixed in 5.11.0.1018.18
  16. Upgrade

    Upgrade ubuntu/linux-image-gcp to a version that resolves this vulnerability.

    Fixed in 5.11.0.1018.18
  17. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-1018-gcp to a version that resolves this vulnerability.

    Fixed in 5.11.0-1018.20
  18. Upgrade

    Upgrade ubuntu/linux-image-oracle to a version that resolves this vulnerability.

    Fixed in 5.11.0.1017.18
  19. Upgrade

    Upgrade ubuntu/linux-image-raspi to a version that resolves this vulnerability.

    Fixed in 5.11.0.1017.15
  20. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-34-generic-64k to a version that resolves this vulnerability.

    Fixed in 5.11.0-34.36
  21. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-1015-azure to a version that resolves this vulnerability.

    Fixed in 5.11.0-1015.16
  22. Upgrade

    Upgrade ubuntu/linux-image-kvm to a version that resolves this vulnerability.

    Fixed in 5.11.0.1015.16
  23. Upgrade

    Upgrade ubuntu/linux-image-generic-lpae to a version that resolves this vulnerability.

    Fixed in 5.11.0.34.36
  24. Upgrade

    Upgrade ubuntu/linux-image-generic-64k to a version that resolves this vulnerability.

    Fixed in 5.11.0.34.36
  25. Upgrade

    Upgrade ubuntu/linux-image-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.11.0.34.36
  26. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-34-generic to a version that resolves this vulnerability.

    Fixed in 5.11.0-34.36~20.04.1
  27. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-1017-aws to a version that resolves this vulnerability.

    Fixed in 5.11.0-1017.18~20.04.1
  28. Upgrade

    Upgrade ubuntu/linux-image-aws to a version that resolves this vulnerability.

    Fixed in 5.11.0.1017.18~20.04.16
  29. Upgrade

    Upgrade ubuntu/linux-image-lowlatency-hwe-20.04 to a version that resolves this vulnerability.

    Fixed in 5.11.0.34.36~20.04.13
  30. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-1017-oracle to a version that resolves this vulnerability.

    Fixed in 5.11.0-1017.18~20.04.1
  31. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-34-generic-lpae to a version that resolves this vulnerability.

    Fixed in 5.11.0-34.36~20.04.1
  32. Upgrade

    Upgrade ubuntu/linux-image-generic-hwe-20.04 to a version that resolves this vulnerability.

    Fixed in 5.11.0.34.36~20.04.13
  33. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-34-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.11.0-34.36~20.04.1
  34. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-34-generic-64k to a version that resolves this vulnerability.

    Fixed in 5.11.0-34.36~20.04.1
  35. Upgrade

    Upgrade ubuntu/linux-image-oracle to a version that resolves this vulnerability.

    Fixed in 5.11.0.1017.18~20.04.10
  36. Upgrade

    Upgrade ubuntu/linux-image-generic-lpae-hwe-20.04 to a version that resolves this vulnerability.

    Fixed in 5.11.0.34.36~20.04.13
  37. Upgrade

    Upgrade ubuntu/linux-image-generic-64k-hwe-20.04 to a version that resolves this vulnerability.

    Fixed in 5.11.0.34.36~20.04.13
  38. Upgrade

    Upgrade ubuntu/linux-image-5.11.0-1015-azure to a version that resolves this vulnerability.

    Fixed in 5.11.0-1015.16~20.04.1
  39. Upgrade

    Upgrade ubuntu/linux-image-virtual-hwe-20.04 to a version that resolves this vulnerability.

    Fixed in 5.11.0.34.36~20.04.13

Event History

Sep 8, 2021
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of USN-5070-1?

The severity of USN-5070-1 is categorized as high due to potential exploitation risks involving guest VMs.

2

How do I fix USN-5070-1?

To fix USN-5070-1, update your Ubuntu system to the latest kernel version specified in the advisory.

3

Which versions of Ubuntu are affected by USN-5070-1?

Ubuntu 21.04 is the primary version affected by USN-5070-1.

4

What types of packages are vulnerable in USN-5070-1?

The vulnerable packages include linux-image-5.11.0-34-generic and various related kernel packages for Ubuntu.

5

Is there a workaround for the USN-5070-1 vulnerability?

While updating the kernel is the best approach, temporarily disabling nested virtualization can serve as a workaround until a fix is implemented.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203