USN-5208-1: Linux kernel vulnerabilities
Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. (CVE-2021-4002) It was discovered that a race condition existed in the overlay file system implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2021-20321) It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface (NCI) implementation. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2021-3760) It was discovered that an integer overflow could be triggered in the eBPF implementation in the Linux kernel when preallocating objects for stack maps. A privileged local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2021-41864) It was discovered that the KVM implementation for POWER8 processors in the Linux kernel did not properly keep track if a wakeup event could be resolved by a guest. An attacker in a guest VM could possibly use this to cause a denial of service (host OS crash). (CVE-2021-43056) It was discovered that the TIPC Protocol implementation in the Linux kernel did not properly validate MSGCRYPTO messages in some situations. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-43267) It was discovered that the ISDN CAPI implementation in the Linux kernel contained a race condition in certain situations that could trigger an array out-of-bounds bug. A privileged local attacker could possibly use this to cause a denial of service or execute arbitrary code. (CVE-2021-43389)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.13.0.1008.10 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 5.13.0.23.34 - Upgrade
Upgrade
ubuntu/linux-image-generic-64kto a version that resolves this vulnerability.Fixed in 5.13.0.23.34 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 5.13.0.23.34 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-23-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.13.0-23.23 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1008-awsto a version that resolves this vulnerability.Fixed in 5.13.0-1008.9 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-23-genericto a version that resolves this vulnerability.Fixed in 5.13.0-23.23 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1008-gcpto a version that resolves this vulnerability.Fixed in 5.13.0-1008.9 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.13.0.1009.10 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1011-oracleto a version that resolves this vulnerability.Fixed in 5.13.0-1011.13 - Upgrade
Upgrade
ubuntu/linux-image-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.13.0.1012.18 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04to a version that resolves this vulnerability.Fixed in 5.13.0.23.34 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-23-lowlatencyto a version that resolves this vulnerability.Fixed in 5.13.0-23.23 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 5.13.0.1007.7 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 5.13.0.1008.9 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1012-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.13.0-1012.14 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 5.13.0.1011.13 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 5.13.0.1012.18 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-23-generic-64kto a version that resolves this vulnerability.Fixed in 5.13.0-23.23 - Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 5.13.0.1008.9 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1009-azureto a version that resolves this vulnerability.Fixed in 5.13.0-1009.10 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.13.0.23.34 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1007-kvmto a version that resolves this vulnerability.Fixed in 5.13.0-1007.7 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 5.13.0.23.34 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1012-raspito a version that resolves this vulnerability.Fixed in 5.13.0-1012.14 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 5.11.0.44.44 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-1024-raspito a version that resolves this vulnerability.Fixed in 5.11.0-1024.26 - Upgrade
Upgrade
ubuntu/linux-image-generic-64kto a version that resolves this vulnerability.Fixed in 5.11.0.44.44 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-1024-gcpto a version that resolves this vulnerability.Fixed in 5.11.0-1024.26 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.11.0.1023.24 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-1023-oracleto a version that resolves this vulnerability.Fixed in 5.11.0-1023.24 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-1024-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.11.0-1024.26 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-44-generic-64kto a version that resolves this vulnerability.Fixed in 5.11.0-44.48 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-1023-azureto a version that resolves this vulnerability.Fixed in 5.11.0-1023.24 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-44-lowlatencyto a version that resolves this vulnerability.Fixed in 5.11.0-44.48 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.11.0.1023.24 - Upgrade
Upgrade
ubuntu/linux-image-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.11.0.1024.22 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04to a version that resolves this vulnerability.Fixed in 5.11.0.44.44 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-1023-awsto a version that resolves this vulnerability.Fixed in 5.11.0-1023.24 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-44-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.11.0-44.48 - Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 5.11.0.1024.24 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-1021-kvmto a version that resolves this vulnerability.Fixed in 5.11.0-1021.23 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 5.11.0.1024.24 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-44-genericto a version that resolves this vulnerability.Fixed in 5.11.0-44.48 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 5.11.0.1023.24 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 5.11.0.44.44 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 5.11.0.1024.22 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 5.11.0.1021.22 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.11.0.44.44 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 5.11.0.44.44 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-1023-awsto a version that resolves this vulnerability.Fixed in 5.11.0-1023.24~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-1024-gcpto a version that resolves this vulnerability.Fixed in 5.11.0-1024.26~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.11.0.1023.24~20.04.23 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.11.0.44.48~20.04.22 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-1023-oracleto a version that resolves this vulnerability.Fixed in 5.11.0-1023.24~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-44-generic-64kto a version that resolves this vulnerability.Fixed in 5.11.0-44.48~20.04.2 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-1023-azureto a version that resolves this vulnerability.Fixed in 5.11.0-1023.24~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.11.0.44.48~20.04.22 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.11.0.1023.24~20.04.23 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-44-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.11.0-44.48~20.04.2 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-44-lowlatencyto a version that resolves this vulnerability.Fixed in 5.11.0-44.48~20.04.2 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 5.11.0.1024.26~20.04.24 - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.11.0.44.48~20.04.22 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 5.11.0.1023.24~20.04.16 - Upgrade
Upgrade
ubuntu/linux-image-5.11.0-44-genericto a version that resolves this vulnerability.Fixed in 5.11.0-44.48~20.04.2 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.11.0.44.48~20.04.22 - Upgrade
Upgrade
ubuntu/linux-image-generic-64k-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.11.0.44.48~20.04.22 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch USN-5208-1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-5208-1?
The severity of USN-5208-1 is categorized as high due to the potential for local attackers to exploit the vulnerability and compromise data integrity.
How do I fix USN-5208-1?
To fix USN-5208-1, users need to update their Linux kernel packages to the recommended versions as specified in the security advisory.
What systems are affected by USN-5208-1?
USN-5208-1 affects Ubuntu 21.10 with specific packages of the Linux kernel.
What are the potential impacts of USN-5208-1?
The impacts of USN-5208-1 could include unauthorized access to sensitive data due to improper TLB flushes in the hugetlb implementation.
Who can exploit the USN-5208-1 vulnerability?
The USN-5208-1 vulnerability can be exploited by local attackers who have access to the system where the vulnerable kernel is running.