USN-5493-1: Linux kernel vulnerability
Published Jun 27, 2022
·Updated
It was discovered that the 8 Devices USB2CAN interface implementation in the Linux kernel did not properly handle certain error conditions, leading to a double-free. A local attacker could possibly use this to cause a denial of service (system crash).
Affected Software
64 affected componentsFixes available
All of the following
ubuntu/linux-image-5.13.0-52-generic-64k<5.13.0-52.59
5.13.0-52.59
Ubuntu Ubuntu=21.10
All of the following
ubuntu/linux-image-virtual<5.13.0.52.58
5.13.0.52.58
Ubuntu Ubuntu=21.10
All of the following
ubuntu/linux-image-generic-64k<5.13.0.52.58
5.13.0.52.58
Ubuntu Ubuntu=21.10
All of the following
ubuntu/linux-image-generic<5.13.0.52.58
5.13.0.52.58
Ubuntu Ubuntu=21.10
All of the following
ubuntu/linux-image-5.13.0-52-lowlatency<5.13.0-52.59
5.13.0-52.59
Ubuntu Ubuntu=21.10
All of the following
ubuntu/linux-image-5.13.0-52-generic-lpae<5.13.0-52.59
5.13.0-52.59
Ubuntu Ubuntu=21.10
All of the following
ubuntu/linux-image-oem-20.04<5.13.0.52.58
5.13.0.52.58
Ubuntu Ubuntu=21.10
All of the following
ubuntu/linux-image-5.13.0-52-generic<5.13.0-52.59
5.13.0-52.59
Ubuntu Ubuntu=21.10
All of the following
ubuntu/linux-image-generic-lpae<5.13.0.52.58
5.13.0.52.58
Ubuntu Ubuntu=21.10
All of the following
ubuntu/linux-image-lowlatency<5.13.0.52.58
5.13.0.52.58
Ubuntu Ubuntu=21.10
All of the following
ubuntu/linux-image-virtual<5.4.0.121.122
5.4.0.121.122
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-generic<5.4.0.121.122
5.4.0.121.122
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-oem<5.4.0.121.122
5.4.0.121.122
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-oem-osp1<5.4.0.121.122
5.4.0.121.122
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.4.0-121-generic<5.4.0-121.137
5.4.0-121.137
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.4.0-121-generic-lpae<5.4.0-121.137
5.4.0-121.137
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.4.0-121-lowlatency<5.4.0-121.137
5.4.0-121.137
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-generic-lpae<5.4.0.121.122
5.4.0.121.122
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-lowlatency<5.4.0.121.122
5.4.0.121.122
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-4.15.0-188-generic-lpae<4.15.0-188.199
4.15.0-188.199
Ubuntu Ubuntu=18.04
All of the following
ubuntu/linux-image-virtual<4.15.0.188.173
4.15.0.188.173
Ubuntu Ubuntu=18.04
All of the following
ubuntu/linux-image-generic<4.15.0.188.173
4.15.0.188.173
Ubuntu Ubuntu=18.04
All of the following
ubuntu/linux-image-4.15.0-188-lowlatency<4.15.0-188.199
4.15.0-188.199
Ubuntu Ubuntu=18.04
All of the following
ubuntu/linux-image-4.15.0-188-generic<4.15.0-188.199
4.15.0-188.199
Ubuntu Ubuntu=18.04
All of the following
ubuntu/linux-image-generic-lpae<4.15.0.188.173
4.15.0.188.173
Ubuntu Ubuntu=18.04
All of the following
ubuntu/linux-image-lowlatency<4.15.0.188.173
4.15.0.188.173
Ubuntu Ubuntu=18.04
All of the following
ubuntu/linux-image-4.15.0-188-lowlatency<4.15.0-188.199~16.04.1
4.15.0-188.199~16.04.1
Ubuntu Ubuntu=16.04
All of the following
ubuntu/linux-image-lowlatency-hwe-16.04<4.15.0.188.175
4.15.0.188.175
Ubuntu Ubuntu=16.04
All of the following
ubuntu/linux-image-4.15.0-188-generic<4.15.0-188.199~16.04.1
4.15.0-188.199~16.04.1
Ubuntu Ubuntu=16.04
All of the following
ubuntu/linux-image-virtual-hwe-16.04<4.15.0.188.175
4.15.0.188.175
Ubuntu Ubuntu=16.04
All of the following
ubuntu/linux-image-oem<4.15.0.188.175
4.15.0.188.175
Ubuntu Ubuntu=16.04
All of the following
ubuntu/linux-image-generic-hwe-16.04<4.15.0.188.175
4.15.0.188.175
Ubuntu Ubuntu=16.04
Event History
Jun 27, 2022
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-5493-1?
The severity of USN-5493-1 is considered medium due to its potential to cause a denial of service.
2
How do I fix USN-5493-1?
To fix USN-5493-1, you should update the affected packages to at least version 5.13.0-52.59 or the recommended versions for your Ubuntu release.
3
Who is affected by USN-5493-1?
USN-5493-1 affects local users of Ubuntu versions 21.10 and 20.04 that utilize the specific USB2CAN interface in the Linux kernel.
4
What is the nature of the vulnerability in USN-5493-1?
The vulnerability in USN-5493-1 involves a double-free condition that can lead to a system crash when specific error conditions are not handled properly.
5
Is there a workaround for USN-5493-1 until I can apply the fix?
There are no known workarounds for USN-5493-1; it is advised to apply the recommended updates as soon as possible.