Summary
It was discovered that the cgroup v2 subsystem in the Linux kernel did not
properly perform reference counting in some situations, leading to a NULL
pointer dereference. A local attacker could use this to cause a denial of
service or possibly gain administrative privileges.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws-5.3 | 5.3.0-1034.36 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-5.3 | 5.3.0-1034.36 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe | 5.3.0-66.60 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2-5.3 | 5.3.0-1032.34 |
Vulnerabilities 1
-
Unscored —CVE-2020-14356 Public exploit
A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way w…
References
-
report
https://ubuntu.com/security/CVE-2020-14356