USN-5595-1: Linux kernel vulnerabilities
Asaf Modelevsky discovered that the Intel(R) 10GbE PCI Express (ixgbe) Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. (CVE-2021-33061) It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33656)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.4.0.1090.67 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1084-awsto a version that resolves this vulnerability.Fixed in 5.4.0-1084.91~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.4.0.1084.64 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1090-azureto a version that resolves this vulnerability.Fixed in 5.4.0-1090.95~18.04.1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-33061?
The severity of CVE-2021-33061 is not specified in the provided information.
How can CVE-2021-33061 be exploited?
CVE-2021-33061 can be exploited by a local attacker to cause a denial of service.
Which Linux kernel versions are affected by CVE-2021-33061?
The Linux kernel versions 5.4.0.1090.67, 5.4.0-1090.95~18.04.1, 5.4.0-1084.91~18.04.1, and 5.4.0.1084.64 are affected by CVE-2021-33061.
How do I fix the vulnerability described in USN-5595-1?
To fix the vulnerability described in USN-5595-1, update the Linux kernel to version 5.4.0.1090.67 or later.
Where can I find more information about USN-5595-1?
You can find more information about USN-5595-1 on the Ubuntu Security Notices website.