Summary
It was discovered that the elf handling code in the Linux kernel did not
initialize memory before using it in certain situations. A local attacker
could use this to possibly expose sensitive information (kernel memory).
(CVE-2020-10732)
Matthew Sheets discovered that the SELinux network label handling
implementation in the Linux kernel could be coerced into de-referencing a
NULL pointer. A remote attacker could use this to cause a denial of service
(system crash). (CVE-2020-10711)
It was discovered that the SCSI generic (sg) driver in the Linux kernel did
not properly handle certain error conditions correctly. A local privileged
attacker could use this to cause a denial of service (system crash).
(CVE-2020-12770)
It was discovered that the USB Gadget device driver in the Linux kernel did
not validate arguments passed from configfs in some situations. A local
attacker could possibly use this to cause a denial of service (system
crash) or possibly expose sensitive information. (CVE-2020-13143)
It was discovered that the KVM implementation in the Linux kernel did not
properly deallocate memory on initialization for some processors. A local
attacker could possibly use this to cause a denial of service.
(CVE-2020-12768)
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux | 5.4.0-40.44 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws | 5.4.0-1018.18 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure | 5.4.0-1020.20 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gcp | 5.4.0-1019.19 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-kvm | 5.4.0-1018.18 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle | 5.4.0-1019.19 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-raspi | 5.4.0-1013.13 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-riscv | 5.4.0-28.32 |
Vulnerabilities 5
-
Medium 5.9
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occ…
-
Low 3.3
A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a loca…
-
Unscored —
An issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has a memory leak, aka CID…
-
Unscored —
An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failu…
-
Unscored —
gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup wi…