Summary
It was discovered that the overlayfs implementation in the Linux kernel did
not properly validate the application of file system capabilities with
respect to user namespaces. A local attacker could use this to gain
elevated privileges. (CVE-2021-3493)
Piotr Krysiuk discovered that the BPF JIT compiler for x86 in the Linux
kernel did not properly validate computation of branch displacements in
some situations. A local attacker could use this to cause a denial of
service (system crash) or possibly execute arbitrary code. (CVE-2021-29154)
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-209.241 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws | 4.4.0-1127.141 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws-hwe | 4.15.0-1099.106~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-azure | 4.15.0-1113.126~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gcp | 4.15.0-1098.111~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.15.0-142.146~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-kvm | 4.4.0-1092.101 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-oracle | 4.15.0-1070.78~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-raspi2 | 4.4.0-1151.162 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-snapdragon | 4.4.0-1155.165 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-142.146 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1099.106 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure-4.15 | 4.15.0-1113.126 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-dell300x | 4.15.0-1017.21 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-4.15 | 4.15.0-1098.111 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1090.92 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle | 4.15.0-1070.78 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1084.89 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-snapdragon | 4.15.0-1101.110 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-aws | 4.4.0-1091.95 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-azure | 4.15.0-1113.126~14.04.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-lts-xenial | 4.4.0-209.241~14.04.1 |
Vulnerabilities 2
-
High 8.8
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting …
KEV Oct 20, 2022 -
Unscored —
BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them…