Skip to content
OpenAdvisories
Unscored USN-4364-1 7 CVEs

linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon vulnerabilities

Published May 19, 2020 · Updated Jun 3, 2026

Summary

It was discovered that the ADIS16400 IIO IMU Driver for the Linux kernel
did not properly deallocate memory in certain error conditions. A local
attacker could use this to cause a denial of service (memory exhaustion).
(CVE-2019-19060)

It was discovered that the vhost net driver in the Linux kernel contained a
stack buffer overflow. A local attacker with the ability to perform ioctl()
calls on /dev/vhost-net could use this to cause a denial of service (system
crash). (CVE-2020-10942)

It was discovered that the Serial CAN interface driver in the Linux kernel
did not properly initialize data. A local attacker could use this to expose
sensitive information (kernel memory). (CVE-2020-11494)

It was discovered that the linux kernel did not properly validate certain
mount options to the tmpfs virtual memory file system. A local attacker
with the ability to specify mount options could use this to cause a denial
of service (system crash). (CVE-2020-11565)

It was discovered that the OV51x USB Camera device driver in the Linux
kernel did not properly validate device metadata. A physically proximate
attacker could use this to cause a denial of service (system crash).
(CVE-2020-11608)

It was discovered that the STV06XX USB Camera device driver in the Linux
kernel did not properly validate device metadata. A physically proximate
attacker could use this to cause a denial of service (system crash).
(CVE-2020-11609)

It was discovered that the Xirlink C-It USB Camera device driver in the
Linux kernel did not properly validate device metadata. A physically
proximate attacker could use this to cause a denial of service (system
crash). (CVE-2020-11668)

Fixed packages 7

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS linux 4.4.0-179.209
Ubuntu · 16.04 LTS 16.04:LTS linux-aws 4.4.0-1107.118
Ubuntu · 16.04 LTS 16.04:LTS linux-kvm 4.4.0-1071.78
Ubuntu · 16.04 LTS 16.04:LTS linux-raspi2 4.4.0-1133.142
Ubuntu · 16.04 LTS 16.04:LTS linux-snapdragon 4.4.0-1137.145
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-aws 4.4.0-1067.71
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-lts-xenial 4.4.0-179.209~14.04.1

Vulnerabilities 7

References

  • report
    https://ubuntu.com/security/CVE-2019-19060
  • report
    https://ubuntu.com/security/CVE-2020-10942
  • report
    https://ubuntu.com/security/CVE-2020-11494
  • report
    https://ubuntu.com/security/CVE-2020-11565
  • report
    https://ubuntu.com/security/CVE-2020-11608
  • report
    https://ubuntu.com/security/CVE-2020-11609
  • report
    https://ubuntu.com/security/CVE-2020-11668