Summary
It was discovered that the eBPF implementation in the Linux kernel did not
properly track bounds information for 32 bit registers when performing div
and mod operations. A local attacker could use this to possibly execute
arbitrary code.(CVE-2021-3600)
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code.(CVE-2021-33909)
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-lts-xenial | 4.4.0-212.244~14.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux | 4.4.0-212.244 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux | 4.15.0-151.157 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-gke-4.15 | — |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-gke-5.4 | 5.4.0-1049.52~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-gkeop-5.4 | 5.4.0-1021.22~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-hwe-5.4 | 5.4.0-80.90~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-oem | — |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | linux | 5.4.0-80.90 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | linux-gcp | 5.4.0-1049.53 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | linux-gke | 5.4.0-1049.52 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | linux-gkeop | 5.4.0-1021.22 |
Vulnerabilities 2
-
High 7.8
It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit…
-
Unscored —CVE-2021-33909 Public exploit
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, …