USN-5267-3: Linux kernel (Raspberry Pi) vulnerabilities
USN-5267-1 fixed vulnerabilities in the Linux kernel. This update provides the corresponding updates for the Linux kernel for Raspberry Pi devices. Original advisory details: It was discovered that the Bluetooth subsystem in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3640) Likang Luo discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3752) Luo Likang discovered that the FireDTV Firewire driver in the Linux kernel did not properly perform bounds checking in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-42739)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1052-raspito a version that resolves this vulnerability.Fixed in 5.4.0-1052.58 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 5.4.0.1052.86 - Upgrade
Upgrade
ubuntu/linux-image-raspi2to a version that resolves this vulnerability.Fixed in 5.4.0.1052.86 - Upgrade
Upgrade
ubuntu/linux-image-raspi-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.4.0.1052.54 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1052-raspito a version that resolves this vulnerability.Fixed in 5.4.0-1052.58~18.04.1 - Upgrade
Upgrade
Linux kernel (Raspberry Pi)to a version that resolves this vulnerability.Patch USN-5267-3
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID of this advisory?
USN-5267-3
Which devices are affected by this Linux kernel vulnerability?
Raspberry Pi devices.
What is the severity of USN-5267-3?
High severity.
How can I fix the vulnerability in the Linux kernel for Raspberry Pi devices?
Update to Linux kernel version 5.4.0-1052.58 or higher.
Where can I find more information about USN-5267-3?
You can find more information about USN-5267-3 on the Ubuntu Security website.