USN-5589-1: Linux kernel vulnerabilities
Asaf Modelevsky discovered that the Intel(R) 10GbE PCI Express (ixgbe) Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. (CVE-2021-33061) It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33656)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 5.4.0.125.126 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 5.4.0.125.126 - Upgrade
Upgrade
ubuntu/linux-image-oemto a version that resolves this vulnerability.Fixed in 5.4.0.125.126 - Upgrade
Upgrade
ubuntu/linux-image-oem-osp1to a version that resolves this vulnerability.Fixed in 5.4.0.125.126 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-125-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.4.0-125.141 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-125-genericto a version that resolves this vulnerability.Fixed in 5.4.0-125.141 - Upgrade
Upgrade
ubuntu/linux-image-raspi2to a version that resolves this vulnerability.Fixed in 5.4.0.1069.102 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1069-raspito a version that resolves this vulnerability.Fixed in 5.4.0-1069.79 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 5.4.0.1069.102 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-125-lowlatencyto a version that resolves this vulnerability.Fixed in 5.4.0-125.141 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.4.0.125.126 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 5.4.0.125.126
Event History
Frequently Asked Questions
What is the severity of USN-5589-1?
The severity of USN-5589-1 is not mentioned.
How do I fix USN-5589-1?
To fix USN-5589-1, update to version 5.4.0.125.126 of the Linux kernel.
Which Linux kernel versions are affected by USN-5589-1?
Linux kernel versions up to 5.4.0.125.126 are affected by USN-5589-1.
What is the CVE ID of USN-5589-1?
The CVE ID of USN-5589-1 is CVE-2021-33061.
Where can I find more information about USN-5589-1?
You can find more information about USN-5589-1 on the Ubuntu Security website.