Summary
Adam Nichols discovered that heap overflows existed in the iSCSI subsystem
in the Linux kernel. A local attacker could use this to cause a denial of
service (system crash) or possibly execute arbitrary code. (CVE-2021-27365)
Adam Nichols discovered that the iSCSI subsystem in the Linux kernel did
not properly restrict access to iSCSI transport handles. A local attacker
could use this to cause a denial of service or expose sensitive information
(kernel pointer addresses). (CVE-2021-27363)
Adam Nichols discovered that an out-of-bounds read existed in the iSCSI
subsystem in the Linux kernel. A local attacker could use this to cause a
denial of service (system crash) or expose sensitive information (kernel
memory). (CVE-2021-27364)
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-206.238 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws | 4.4.0-1124.138 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws-hwe | 4.15.0-1096.103~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-azure | 4.15.0-1110.122~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gcp | 4.15.0-1095.108~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.15.0-139.143~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-kvm | 4.4.0-1090.99 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-oracle | 4.15.0-1067.75~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-raspi2 | 4.4.0-1148.158 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-snapdragon | 4.4.0-1152.162 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-139.143 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1096.103 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure-4.15 | 4.15.0-1110.122 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-4.15 | 4.15.0-1095.108 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1087.89 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle | 4.15.0-1067.75 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1081.86 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-snapdragon | 4.15.0-1098.107 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-aws | 4.4.0-1088.92 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-azure | 4.15.0-1110.122~14.04.1 |
Vulnerabilities 3
-
Unscored —
An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address …
-
Unscored —
An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected b…
-
Unscored —CVE-2021-27365 Public exploit
An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate lengt…