Summary
Or Cohen discovered that the AF_PACKET implementation in the Linux
kernel did not properly perform bounds checking in some situations. A
local attacker could use this to cause a denial of service (system
crash) or possibly execute arbitrary code.
Fixed packages 35
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws-hwe | 4.15.0-1082.86~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-azure | 4.15.0-1095.105~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gcp | 4.15.0-1083.94~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.15.0-117.118~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-oracle | 4.15.0-1053.57~16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-117.118 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1082.86 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws-5.3 | 5.3.0-1035.37 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws-5.4 | 5.4.0-1024.24~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure-4.15 | 4.15.0-1095.105 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure-5.4 | 5.4.0-1025.25~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-4.15 | 4.15.0-1083.94 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-5.4 | 5.4.0-1024.24~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-4.15 | 4.15.0-1069.72 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-5.0 | 5.0.0-1047.48 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-5.3 | 5.3.0-1036.38 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe | 5.3.0-67.61 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe-5.4 | 5.4.0-47.51~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1074.75 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem | 4.15.0-1096.106 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem-osp1 | 5.0.0-1068.73 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle | 4.15.0-1053.57 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle-5.4 | 5.4.0-1024.24~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi-5.4 | 5.4.0-1018.20~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1070.74 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2-5.3 | 5.3.0-1033.35 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-snapdragon | 4.15.0-1086.94 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux | 5.4.0-47.51 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws | 5.4.0-1024.24 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure | 5.4.0-1025.25 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gcp | 5.4.0-1024.24 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-kvm | 5.4.0-1023.23 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle | 5.4.0-1024.24 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-raspi | 5.4.0-1018.20 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-azure | 4.15.0-1095.105~14.04.1 |
Vulnerabilities 1
-
Medium 6.7CVE-2020-14386 Public exploit
A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from un…
References
-
report
https://ubuntu.com/security/CVE-2020-14386