Skip to content
OpenAdvisories
Unscored USN-4713-1 1 CVE

linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerability

Published Feb 2, 2021 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the LIO SCSI target implementation in the Linux
kernel performed insufficient identifier checking in certain XCOPY
requests. An attacker with access to at least one LUN in a multiple
backstore environment could use this to expose sensitive information or
modify data.

Fixed packages 13

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux-aws-5.4 5.4.0-1037.39~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-azure-5.4 5.4.0-1039.41~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp-5.4 5.4.0-1036.39~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-gke-5.4 5.4.0-1035.37~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-gkeop-5.4 5.4.0-1009.10~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-oracle-5.4 5.4.0-1037.40~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-raspi-5.4 5.4.0-1028.31~18.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-aws 5.4.0-1037.39
Ubuntu · 20.04 LTS 20.04:LTS linux-azure 5.4.0-1039.41
Ubuntu · 20.04 LTS 20.04:LTS linux-gcp 5.4.0-1036.39
Ubuntu · 20.04 LTS 20.04:LTS linux-kvm 5.4.0-1032.33
Ubuntu · 20.04 LTS 20.04:LTS linux-oracle 5.4.0-1037.40
Ubuntu · 20.04 LTS 20.04:LTS linux-raspi 5.4.0-1028.31

Vulnerabilities 1

References

  • report
    https://ubuntu.com/security/CVE-2020-28374