USN-5267-3: Linux kernel (Raspberry Pi) vulnerabilities
First published: Thu Feb 17 2022(Updated: )
USN-5267-1 fixed vulnerabilities in the Linux kernel. This update provides the corresponding updates for the Linux kernel for Raspberry Pi devices. Original advisory details: It was discovered that the Bluetooth subsystem in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3640) Likang Luo discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3752) Luo Likang discovered that the FireDTV Firewire driver in the Linux kernel did not properly perform bounds checking in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-42739)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-5.4.0-1052-raspi | <5.4.0-1052.58 | 5.4.0-1052.58 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-raspi | <5.4.0.1052.86 | 5.4.0.1052.86 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-raspi2 | <5.4.0.1052.86 | 5.4.0.1052.86 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-raspi-hwe-18.04 | <5.4.0.1052.54 | 5.4.0.1052.54 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1052-raspi | <5.4.0-1052.58~18.04.1 | 5.4.0-1052.58~18.04.1 |
| =18.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2021-3640
- https://ubuntu.com/security/CVE-2021-42739
- https://ubuntu.com/security/CVE-2021-3752
- https://ubuntu.com/security/notices/USN-5265-1
- https://ubuntu.com/security/notices/USN-5267-1
- https://ubuntu.com/security/notices/USN-5268-1
- https://ubuntu.com/security/notices/USN-5165-1
- https://ubuntu.com/security/notices/USN-5207-1
- https://ubuntu.com/security/notices/USN-5266-1
- https://ubuntu.com/security/notices/USN-5361-1
- https://ubuntu.com/security/notices/USN-5505-1
- https://ubuntu.com/security/notices/USN-5513-1
- https://launchpad.net/ubuntu/+source/linux-raspi/5.4.0-1052.58
- https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.4.0.1052.86
- https://launchpad.net/ubuntu/+source/linux-meta-raspi-5.4/5.4.0.1052.54
- https://launchpad.net/ubuntu/+source/linux-raspi-5.4/5.4.0-1052.58~18.04.1
- https://ubuntu.com/security/notices/USN-5267-3 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID of this advisory?
USN-5267-3
Which devices are affected by this Linux kernel vulnerability?
Raspberry Pi devices.
What is the severity of USN-5267-3?
High severity.
How can I fix the vulnerability in the Linux kernel for Raspberry Pi devices?
Update to Linux kernel version 5.4.0-1052.58 or higher.
Where can I find more information about USN-5267-3?
You can find more information about USN-5267-3 on the Ubuntu Security website.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- collector/usn
- source/Ubuntu
- anchor-related/USN-5265-1
- anchor-related/USN-5267-1
- anchor-related/USN-5268-1
- anchor-related/USN-5165-1
- anchor-related/USN-5207-1
- anchor-related/USN-5266-1
- anchor-related/USN-5361-1
- anchor-related/USN-5505-1
- anchor-related/USN-5513-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/20.04
- version/ubuntu ubuntu/18.04