[USN-5591-4] Linux kernel (AWS) vulnerability

Severity Medium

Affected Packages 16

CVEs 1

The system could be made to crash or run programs as an administrator.

It was discovered that the virtual terminal driver in the Linux kernel did
not properly handle VGA console font changes, leading to an out-of-bounds
write. A local attacker could use this to cause a denial of service (system
crash) or possibly execute arbitrary code.

Package	Affected Version
pkg:deb/ubuntu/linux-tools-aws-lts-18.04?distro=bionic	< 4.15.0.1140.140
pkg:deb/ubuntu/linux-tools-4.15.0-1140-aws?distro=bionic	< 4.15.0-1140.151
pkg:deb/ubuntu/linux-modules-extra-aws-lts-18.04?distro=bionic	< 4.15.0.1140.140
pkg:deb/ubuntu/linux-modules-extra-4.15.0-1140-aws?distro=bionic	< 4.15.0-1140.151
pkg:deb/ubuntu/linux-modules-4.15.0-1140-aws?distro=bionic	< 4.15.0-1140.151
pkg:deb/ubuntu/linux-image-unsigned-4.15.0-1140-aws?distro=bionic	< 4.15.0-1140.151
pkg:deb/ubuntu/linux-image-aws-lts-18.04?distro=bionic	< 4.15.0.1140.140
pkg:deb/ubuntu/linux-image-4.15.0-1140-aws?distro=bionic	< 4.15.0-1140.151
pkg:deb/ubuntu/linux-headers-aws-lts-18.04?distro=bionic	< 4.15.0.1140.140
pkg:deb/ubuntu/linux-headers-4.15.0-1140-aws?distro=bionic	< 4.15.0-1140.151
pkg:deb/ubuntu/linux-cloud-tools-4.15.0-1140-aws?distro=bionic	< 4.15.0-1140.151
pkg:deb/ubuntu/linux-buildinfo-4.15.0-1140-aws?distro=bionic	< 4.15.0-1140.151
pkg:deb/ubuntu/linux-aws-tools-4.15.0-1140?distro=bionic	< 4.15.0-1140.151
pkg:deb/ubuntu/linux-aws-lts-18.04?distro=bionic	< 4.15.0.1140.140
pkg:deb/ubuntu/linux-aws-headers-4.15.0-1140?distro=bionic	< 4.15.0-1140.151
pkg:deb/ubuntu/linux-aws-cloud-tools-4.15.0-1140?distro=bionic	< 4.15.0-1140.151

ID

USN-5591-4

Severity

medium

URL

https://ubuntu.com/security/notices/USN-5591-4

Published

2022-09-02T22:27:51
(2 years ago)

Modified

2022-09-02T22:27:51
(2 years ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/linux-tools-aws-lts-18.04?distro=bionic	ubuntu	linux-tools-aws-lts-18.04	< 4.15.0.1140.140	bionic
Affected	pkg:deb/ubuntu/linux-tools-4.15.0-1140-aws?distro=bionic	ubuntu	linux-tools-4.15.0-1140-aws	< 4.15.0-1140.151	bionic
Affected	pkg:deb/ubuntu/linux-modules-extra-aws-lts-18.04?distro=bionic	ubuntu	linux-modules-extra-aws-lts-18.04	< 4.15.0.1140.140	bionic
Affected	pkg:deb/ubuntu/linux-modules-extra-4.15.0-1140-aws?distro=bionic	ubuntu	linux-modules-extra-4.15.0-1140-aws	< 4.15.0-1140.151	bionic
Affected	pkg:deb/ubuntu/linux-modules-4.15.0-1140-aws?distro=bionic	ubuntu	linux-modules-4.15.0-1140-aws	< 4.15.0-1140.151	bionic
Affected	pkg:deb/ubuntu/linux-image-unsigned-4.15.0-1140-aws?distro=bionic	ubuntu	linux-image-unsigned-4.15.0-1140-aws	< 4.15.0-1140.151	bionic
Affected	pkg:deb/ubuntu/linux-image-aws-lts-18.04?distro=bionic	ubuntu	linux-image-aws-lts-18.04	< 4.15.0.1140.140	bionic
Affected	pkg:deb/ubuntu/linux-image-4.15.0-1140-aws?distro=bionic	ubuntu	linux-image-4.15.0-1140-aws	< 4.15.0-1140.151	bionic
Affected	pkg:deb/ubuntu/linux-headers-aws-lts-18.04?distro=bionic	ubuntu	linux-headers-aws-lts-18.04	< 4.15.0.1140.140	bionic
Affected	pkg:deb/ubuntu/linux-headers-4.15.0-1140-aws?distro=bionic	ubuntu	linux-headers-4.15.0-1140-aws	< 4.15.0-1140.151	bionic
Affected	pkg:deb/ubuntu/linux-cloud-tools-4.15.0-1140-aws?distro=bionic	ubuntu	linux-cloud-tools-4.15.0-1140-aws	< 4.15.0-1140.151	bionic
Affected	pkg:deb/ubuntu/linux-buildinfo-4.15.0-1140-aws?distro=bionic	ubuntu	linux-buildinfo-4.15.0-1140-aws	< 4.15.0-1140.151	bionic
Affected	pkg:deb/ubuntu/linux-aws-tools-4.15.0-1140?distro=bionic	ubuntu	linux-aws-tools-4.15.0-1140	< 4.15.0-1140.151	bionic
Affected	pkg:deb/ubuntu/linux-aws-lts-18.04?distro=bionic	ubuntu	linux-aws-lts-18.04	< 4.15.0.1140.140	bionic
Affected	pkg:deb/ubuntu/linux-aws-headers-4.15.0-1140?distro=bionic	ubuntu	linux-aws-headers-4.15.0-1140	< 4.15.0-1140.151	bionic
Affected	pkg:deb/ubuntu/linux-aws-cloud-tools-4.15.0-1140?distro=bionic	ubuntu	linux-aws-cloud-tools-4.15.0-1140	< 4.15.0-1140.151	bionic

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date