Summary
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-5.3 | 5.3.0-1045.48 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe | 5.3.0-76.72 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2-5.3 | 5.3.0-1042.44 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux | 3.13.0-186.237 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-aws | 4.4.0-1094.99 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-lts-xenial | 4.4.0-212.244~14.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux | 4.4.0-212.244 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-aws | 4.4.0-1130.144 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-kvm | 4.4.0-1095.104 |
Vulnerabilities 1
-
Unscored —CVE-2021-33909 Public exploit
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, …
References
-
report
https://ubuntu.com/security/CVE-2021-33909