Summary
Al Viro discovered that the vfs layer in the Linux kernel contained a use-
after-free vulnerability. A local attacker could use this to cause a denial
of service (system crash) or possibly expose sensitive information (kernel
memory).
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-177.207 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws | 4.4.0-1105.116 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-kvm | 4.4.0-1069.76 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-raspi2 | 4.4.0-1131.140 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-snapdragon | 4.4.0-1135.143 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-aws | 4.4.0-1065.69 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-lts-xenial | 4.4.0-177.207~14.04.1 |
Vulnerabilities 1
-
Unscored —
fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause …
References
-
report
https://ubuntu.com/security/CVE-2020-8428