Summary
It was discovered that the Marvell WiFi-Ex device driver in the Linux
kernel did not properly validate ad-hoc SSIDs. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2020-36158)
Ryota Shiga discovered that the sockopt BPF hooks in the Linux kernel could
allow a user space program to probe for valid kernel addresses. A local
attacker could use this to ease exploitation of another kernel
vulnerability. (CVE-2021-20239)
It was discovered that the priority inheritance futex implementation in the
Linux kernel contained a race condition, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2021-3347)
吴异 discovered that the NFS implementation in the Linux kernel did not
properly prevent access outside of an NFS export that is a subdirectory of
a file system. An attacker could possibly use this to bypass NFS access
restrictions. (CVE-2021-3178)
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws-5.4 | 5.4.0-1039.41~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure-5.4 | 5.4.0-1041.43~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-5.4 | 5.4.0-1038.41~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-5.4 | 5.4.0-1037.39~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gkeop-5.4 | 5.4.0-1011.12~18.04.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe-5.4 | 5.4.0-67.75~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle-5.4 | 5.4.0-1039.42~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi-5.4 | 5.4.0-1030.33~18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux | 5.4.0-67.75 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws | 5.4.0-1039.41 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure | 5.4.0-1041.43 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gcp | 5.4.0-1038.41 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gkeop | 5.4.0-1011.12 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-kvm | 5.4.0-1034.35 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle | 5.4.0-1039.42 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-raspi | 5.4.0-1030.33 |
Vulnerabilities 4
-
High 8.8
mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might…
-
High 7.8CVE-2021-3347 Public exploit
An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault…
-
Unscored —
A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a…
-
Unscored —
fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, al…