USN-5117-1: Linux kernel (OEM) vulnerabilities
It was discovered that the btrfs file system in the Linux kernel did not properly handle removing a non-existent device id. An attacker with CAPSYSADMIN could use this to cause a denial of service. (CVE-2021-3739) It was discovered that the Qualcomm IPC Router protocol implementation in the Linux kernel did not properly validate metadata in some situations. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information. (CVE-2021-3743) It was discovered that the virtual terminal (vt) device implementation in the Linux kernel contained a race condition in its ioctl handling that led to an out-of-bounds read vulnerability. A local attacker could possibly use this to expose sensitive information. (CVE-2021-3753) It was discovered that the Linux kernel did not properly account for the memory usage of certain IPC objects. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-3759)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-3739?
The severity of CVE-2021-3739 is considered low.
How can an attacker exploit CVE-2021-3739?
An attacker with CAP_SYS_ADMIN privileges can exploit CVE-2021-3739 to cause a denial of service.
What is the recommended version of linux-image-oem-20.04c package to fix CVE-2021-3739?
The recommended version to fix CVE-2021-3739 is 5.13.0.1017.21 of the linux-image-oem-20.04c package.
What is the recommended version of linux-image-5.13.0-1017-oem package to fix CVE-2021-3739?
The recommended version to fix CVE-2021-3739 is 5.13.0-1017.21 of the linux-image-5.13.0-1017-oem package.