Summary
Norbert Slusarek discovered a race condition in the CAN BCM networking
protocol of the Linux kernel leading to multiple use-after-free
vulnerabilities. A local attacker could use this issue to execute arbitrary
code.(CVE-2021-3609)
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-hwe | 4.15.0-147.151~16.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux | 4.15.0-147.151 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-gke-4.15 | — |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-gke-5.4 | 5.4.0-1046.48~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-gkeop-5.4 | 5.4.0-1018.19~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-hwe-5.4 | 5.4.0-77.86~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-oem | — |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | linux | 5.4.0-77.86 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | linux-gcp | 5.4.0-1046.49 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | linux-gke | 5.4.0-1046.48 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | linux-gkeop | 5.4.0-1018.19 |
Vulnerabilities 1
-
Unscored —
.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in th…
References
-
report
https://ubuntu.com/security/CVE-2021-3609