Summary
It was discovered that the IPMI message handler implementation in the Linux
kernel did not properly deallocate memory in certain situations. A local
attacker could use this to cause a denial of service (kernel memory
exhaustion). (CVE-2019-19046)
Al Viro discovered that the vfs layer in the Linux kernel contained a use-
after-free vulnerability. A local attacker could use this to cause a denial
of service (system crash) or possibly expose sensitive information (kernel
memory). (CVE-2020-8428)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure-5.3 | 5.3.0-1019.20~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-5.3 | 5.3.0-1017.18~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe | 5.3.0-46.38~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle-5.3 | 5.3.0-1014.15~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2-5.3 | 5.3.0-1022.24~18.04.1 |
Vulnerabilities 2
-
Unscored —
A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through …
-
Unscored —
fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause …