Skip to content
OpenAdvisories
Unscored USN-5114-1 4 CVEs

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

Published Oct 22, 2021 · Updated Jun 29, 2026

Summary

It was discovered that a race condition existed in the Atheros Ath9k WiFi
driver in the Linux kernel. An attacker could possibly use this to expose
sensitive information (WiFi network traffic). (CVE-2020-3702)

It was discovered that the KVM hypervisor implementation in the Linux
kernel did not properly compute the access permissions for shadow pages in
some situations. A local attacker could use this to cause a denial of
service. (CVE-2021-38198)

It was discovered that the ext4 file system in the Linux kernel contained a
race condition when writing xattrs to an inode. A local attacker could use
this to cause a denial of service or possibly gain administrative
privileges. (CVE-2021-40490)

It was discovered that the 6pack network protocol driver in the Linux
kernel did not properly perform validation checks. A privileged attacker
could use this to cause a denial of service (system crash) or execute
arbitrary code. (CVE-2021-42008)

Fixed packages 15

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux 4.15.0-161.169
Ubuntu · 18.04 LTS 18.04:LTS linux-aws 4.15.0-1114.121
Ubuntu · 18.04 LTS 18.04:LTS linux-azure-4.15 4.15.0-1125.138
Ubuntu · 18.04 LTS 18.04:LTS linux-dell300x 4.15.0-1029.34
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp-4.15 4.15.0-1110.124
Ubuntu · 18.04 LTS 18.04:LTS linux-kvm 4.15.0-1101.103
Ubuntu · 18.04 LTS 18.04:LTS linux-oracle 4.15.0-1082.90
Ubuntu · 18.04 LTS 18.04:LTS linux-raspi2 4.15.0-1097.103
Ubuntu · 18.04 LTS 18.04:LTS linux-snapdragon 4.15.0-1114.123
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-azure 4.15.0-1125.138~14.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-aws-hwe 4.15.0-1113.120~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-azure 4.15.0-1125.138~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-gcp 4.15.0-1110.124~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-hwe 4.15.0-161.169~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-oracle 4.15.0-1082.90~16.04.1

Vulnerabilities 4

References

  • report
    https://ubuntu.com/security/CVE-2020-3702
  • report
    https://ubuntu.com/security/CVE-2021-38198
  • report
    https://ubuntu.com/security/CVE-2021-40490
  • report
    https://ubuntu.com/security/CVE-2021-42008