[USN-4659-2] Linux kernel regression
USN-4659-1 introduced a regression in the Linux kernel.
USN-4659-1 fixed vulnerabilities in the Linux kernel. Unfortunately,
that update introduced a regression in the software raid10 driver
when used with fstrim that could lead to data corruption. This update
fixes the problem.
Original advisory details:
It was discovered that a race condition existed in the binder IPC
implementation in the Linux kernel, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2020-0423)
Daniele Antonioli, Nils Ole Tippenhauer, and Kasper Rasmussen discovered
that legacy pairing and secure-connections pairing authentication in the
Bluetooth protocol could allow an unauthenticated user to complete
authentication without pairing credentials via adjacent access. A
physically proximate attacker could use this to impersonate a previously
paired Bluetooth device. (CVE-2020-10135)
It was discovered that a race condition existed in the perf subsystem of
the Linux kernel, leading to a use-after-free vulnerability. An attacker
with access to the perf subsystem could use this to cause a denial of
service (system crash) or possibly execute arbitrary code. (CVE-2020-14351)
Keyu Man discovered that the ICMP global rate limiter in the Linux kernel
could be used to assist in scanning open UDP ports. A remote attacker could
use to facilitate attacks on UDP based services that depend on source port
randomization. (CVE-2020-25705)
It was discovered that the KVM hypervisor in the Linux kernel did not
properly handle interrupts in certain situations. A local attacker in a
guest VM could possibly use this to cause a denial of service (host system
crash). (CVE-2020-27152)
It was discovered that the framebuffer implementation in the Linux kernel
did not properly perform range checks in certain situations. A local
attacker could use this to expose sensitive information (kernel memory).
(CVE-2020-28915)
It was discovered that Power 9 processors could be coerced to expose
information from the L1 cache in certain situations. A local attacker could
use this to expose sensitive information. (CVE-2020-4788)
- ID
- USN-4659-2
- URL
- https://ubuntu.com/security/notices/USN-4659-2
- Published
-
2020-12-13T21:00:47
(3 years ago) - Modified
-
2020-12-13T21:00:47
(3 years ago)
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:deb/ubuntu/linux-image-virtual?distro=groovy | ubuntu | linux-image-virtual | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-virtual-hwe-20.04?distro=groovy | ubuntu | linux-image-virtual-hwe-20.04 | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-virtual-hwe-20.04-edge?distro=groovy | ubuntu | linux-image-virtual-hwe-20.04-edge | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-raspi?distro=groovy | ubuntu | linux-image-raspi | < 5.8.0.1010.13 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-raspi-nolpae?distro=groovy | ubuntu | linux-image-raspi-nolpae | < 5.8.0.1010.13 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-oracle?distro=groovy | ubuntu | linux-image-oracle | < 5.8.0.1013.13 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-oem-20.04?distro=groovy | ubuntu | linux-image-oem-20.04 | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-lowlatency?distro=groovy | ubuntu | linux-image-lowlatency | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-lowlatency-hwe-20.04?distro=groovy | ubuntu | linux-image-lowlatency-hwe-20.04 | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-lowlatency-hwe-20.04-edge?distro=groovy | ubuntu | linux-image-lowlatency-hwe-20.04-edge | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-kvm?distro=groovy | ubuntu | linux-image-kvm | < 5.8.0.1013.15 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-gke?distro=groovy | ubuntu | linux-image-gke | < 5.8.0.1014.14 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-generic?distro=groovy | ubuntu | linux-image-generic | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-generic-lpae?distro=groovy | ubuntu | linux-image-generic-lpae | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-generic-lpae-hwe-20.04?distro=groovy | ubuntu | linux-image-generic-lpae-hwe-20.04 | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-generic-lpae-hwe-20.04-edge?distro=groovy | ubuntu | linux-image-generic-lpae-hwe-20.04-edge | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-generic-hwe-20.04?distro=groovy | ubuntu | linux-image-generic-hwe-20.04 | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-generic-hwe-20.04-edge?distro=groovy | ubuntu | linux-image-generic-hwe-20.04-edge | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-generic-64k?distro=groovy | ubuntu | linux-image-generic-64k | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-generic-64k-hwe-20.04?distro=groovy | ubuntu | linux-image-generic-64k-hwe-20.04 | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-generic-64k-hwe-20.04-edge?distro=groovy | ubuntu | linux-image-generic-64k-hwe-20.04-edge | < 5.8.0.33.38 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-gcp?distro=groovy | ubuntu | linux-image-gcp | < 5.8.0.1014.14 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-azure?distro=groovy | ubuntu | linux-image-azure | < 5.8.0.1015.15 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-aws?distro=groovy | ubuntu | linux-image-aws | < 5.8.0.1016.18 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-5.8.0-33-lowlatency?distro=groovy | ubuntu | linux-image-5.8.0-33-lowlatency | < 5.8.0-33.36 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-5.8.0-33-generic?distro=groovy | ubuntu | linux-image-5.8.0-33-generic | < 5.8.0-33.36 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-5.8.0-33-generic-lpae?distro=groovy | ubuntu | linux-image-5.8.0-33-generic-lpae | < 5.8.0-33.36 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-5.8.0-33-generic-64k?distro=groovy | ubuntu | linux-image-5.8.0-33-generic-64k | < 5.8.0-33.36 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-5.8.0-1016-aws?distro=groovy | ubuntu | linux-image-5.8.0-1016-aws | < 5.8.0-1016.17 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-5.8.0-1015-azure?distro=groovy | ubuntu | linux-image-5.8.0-1015-azure | < 5.8.0-1015.16 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-5.8.0-1014-gcp?distro=groovy | ubuntu | linux-image-5.8.0-1014-gcp | < 5.8.0-1014.14 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-5.8.0-1013-oracle?distro=groovy | ubuntu | linux-image-5.8.0-1013-oracle | < 5.8.0-1013.13 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-5.8.0-1013-kvm?distro=groovy | ubuntu | linux-image-5.8.0-1013-kvm | < 5.8.0-1013.14 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-5.8.0-1010-raspi?distro=groovy | ubuntu | linux-image-5.8.0-1010-raspi | < 5.8.0-1010.13 | groovy | ||
Affected | pkg:deb/ubuntu/linux-image-5.8.0-1010-raspi-nolpae?distro=groovy | ubuntu | linux-image-5.8.0-1010-raspi-nolpae | < 5.8.0-1010.13 | groovy |