Skip to content
OpenAdvisories
High USN-4877-1 2 CVEs

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

Published Mar 16, 2021 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the Marvell WiFi-Ex device driver in the Linux
kernel did not properly validate ad-hoc SSIDs. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2020-36158)

吴异 discovered that the NFS implementation in the Linux kernel did not
properly prevent access outside of an NFS export that is a subdirectory of
a file system. An attacker could possibly use this to bypass NFS access
restrictions. (CVE-2021-3178)

Fixed packages 15

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS linux-aws-hwe 4.15.0-1095.102~16.04.1
Ubuntu · 16.04 LTS 16.04:LTS linux-azure 4.15.0-1109.121~16.04.1
Ubuntu · 16.04 LTS 16.04:LTS linux-gcp 4.15.0-1094.107~16.04.1
Ubuntu · 16.04 LTS 16.04:LTS linux-hwe 4.15.0-137.141~16.04.1
Ubuntu · 16.04 LTS 16.04:LTS linux-oracle 4.15.0-1066.74~16.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux 4.15.0-137.141
Ubuntu · 18.04 LTS 18.04:LTS linux-aws 4.15.0-1095.102
Ubuntu · 18.04 LTS 18.04:LTS linux-azure-4.15 4.15.0-1109.121
Ubuntu · 18.04 LTS 18.04:LTS linux-dell300x 4.15.0-1013.17
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp-4.15 4.15.0-1094.107
Ubuntu · 18.04 LTS 18.04:LTS linux-kvm 4.15.0-1086.88
Ubuntu · 18.04 LTS 18.04:LTS linux-oracle 4.15.0-1066.74
Ubuntu · 18.04 LTS 18.04:LTS linux-raspi2 4.15.0-1080.85
Ubuntu · 18.04 LTS 18.04:LTS linux-snapdragon 4.15.0-1097.106
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-azure 4.15.0-1109.121~14.04.1

Vulnerabilities 2

References

  • report
    https://ubuntu.com/security/CVE-2020-36158
  • report
    https://ubuntu.com/security/CVE-2021-3178