Skip to content
OpenAdvisories
Unscored USN-4748-1 5 CVEs

linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon vulnerabilities

Published Feb 25, 2021 · Updated Jun 3, 2026

Summary

It was discovered that the jfs file system implementation in the Linux
kernel contained an out-of-bounds read vulnerability. A local attacker
could use this to possibly cause a denial of service (system crash).
(CVE-2020-27815)

It was discovered that the memory management subsystem in the Linux kernel
did not properly handle copy-on-write operations in some situations. A
local attacker could possibly use this to gain unintended write access to
read-only memory pages. (CVE-2020-29374)

Michael Kurth and Pawel Wieczorkiewicz discovered that the Xen event
processing backend in the Linux kernel did not properly limit the number of
events queued. An attacker in a guest VM could use this to cause a denial
of service in the host OS. (CVE-2020-29568)

Jann Horn discovered that the tty subsystem of the Linux kernel did not use
consistent locking in some situations, leading to a read-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly expose sensitive information (kernel memory).
(CVE-2020-29660)

Jann Horn discovered a race condition in the tty subsystem of the Linux
kernel in the locking for the TIOCSPGRP ioctl(), leading to a use-after-
free vulnerability. A local attacker could use this to cause a denial of
service (system crash) or possibly execute arbitrary code. (CVE-2020-29661)

Fixed packages 7

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS linux 4.4.0-203.235
Ubuntu · 16.04 LTS 16.04:LTS linux-aws 4.4.0-1122.136
Ubuntu · 16.04 LTS 16.04:LTS linux-kvm 4.4.0-1088.97
Ubuntu · 16.04 LTS 16.04:LTS linux-raspi2 4.4.0-1146.156
Ubuntu · 16.04 LTS 16.04:LTS linux-snapdragon 4.4.0-1150.160
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-aws 4.4.0-1086.90
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-lts-xenial 4.4.0-203.235~14.04.1

Vulnerabilities 5

References

  • report
    https://ubuntu.com/security/CVE-2020-27815
  • report
    https://ubuntu.com/security/CVE-2020-29374
  • report
    https://ubuntu.com/security/CVE-2020-29568
  • report
    https://ubuntu.com/security/CVE-2020-29660
  • report
    https://ubuntu.com/security/CVE-2020-29661