Unscored LSN-0067-1 1 CVE

Kernel Live Patch Security Notice

Published May 20, 2020 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the Serial CAN interface driver in the Linux kernel
did not properly initialize data. A local attacker could use this to expose
sensitive information (kernel memory). (CVE-2020-11494)

Fixed packages 7

Release	Package	Fixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	linux	4.4.0-179.209
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	linux-aws	4.4.0-1107.118
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	linux	4.15.0-101.102
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	linux-aws	4.15.0-1067.71
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	linux-azure	—
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	linux-gcp	—
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	linux-oem	4.15.0-1081.91

Vulnerabilities 1

Unscored —

CVE-2020-11494

An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attack…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 2, 2020

References

report
https://ubuntu.com/security/CVE-2020-11494