USN-5017-1 — linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Summary

It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code. (CVE-2021-33909)

It was discovered that the bluetooth subsystem in the Linux kernel did not
properly perform access control. An authenticated attacker could possibly
use this to expose sensitive information. (CVE-2020-26558, CVE-2021-0129)

Fixed packages 17

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	linux-aws-5.4	5.4.0-1054.57~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS	linux-azure-5.4	5.4.0-1055.57~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS	linux-gcp-5.4	5.4.0-1049.53~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS	linux-gke-5.4	5.4.0-1049.52~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS	linux-gkeop-5.4	5.4.0-1021.22~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS	linux-hwe-5.4	5.4.0-80.90~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS	linux-oracle-5.4	5.4.0-1052.56~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS	linux-raspi-5.4	5.4.0-1041.45~18.04.1
Ubuntu · 20.04 LTS 20.04:LTS	linux	5.4.0-80.90
Ubuntu · 20.04 LTS 20.04:LTS	linux-aws	5.4.0-1054.57
Ubuntu · 20.04 LTS 20.04:LTS	linux-azure	5.4.0-1055.57
Ubuntu · 20.04 LTS 20.04:LTS	linux-gcp	5.4.0-1049.53
Ubuntu · 20.04 LTS 20.04:LTS	linux-gke	5.4.0-1049.52
Ubuntu · 20.04 LTS 20.04:LTS	linux-gkeop	5.4.0-1021.22
Ubuntu · 20.04 LTS 20.04:LTS	linux-kvm	5.4.0-1044.46
Ubuntu · 20.04 LTS 20.04:LTS	linux-oracle	5.4.0-1052.56
Ubuntu · 20.04 LTS 20.04:LTS	linux-raspi	5.4.0-1041.45

Vulnerabilities 3

Unscored —

CVE-2020-26558

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-m…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 24, 2021
Unscored —

CVE-2021-0129

Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjac…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jun 9, 2021
Unscored —

CVE-2021-33909 Public exploit

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jul 20, 2021

References

report
https://ubuntu.com/security/CVE-2020-26558
report
https://ubuntu.com/security/CVE-2021-0129
report
https://ubuntu.com/security/CVE-2021-33909

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Summary

Fixed packages 17

Vulnerabilities 3

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-m…

Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjac…

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, …

References