Skip to content
OpenAdvisories
Unscored USN-5117-1 4 CVEs

linux-oem-5.13 vulnerabilities

Published Oct 20, 2021 · Updated Sep 14, 2026

Summary

It was discovered that the btrfs file system in the Linux kernel did not
properly handle removing a non-existent device id. An attacker with
CAP_SYS_ADMIN could use this to cause a denial of service. (CVE-2021-3739)

It was discovered that the Qualcomm IPC Router protocol implementation in
the Linux kernel did not properly validate metadata in some situations. A
local attacker could use this to cause a denial of service (system crash)
or expose sensitive information. (CVE-2021-3743)

It was discovered that the virtual terminal (vt) device implementation in
the Linux kernel contained a race condition in its ioctl handling that led
to an out-of-bounds read vulnerability. A local attacker could possibly use
this to expose sensitive information. (CVE-2021-3753)

It was discovered that the Linux kernel did not properly account for the
memory usage of certain IPC objects. A local attacker could use this to
cause a denial of service (memory exhaustion). (CVE-2021-3759)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS linux-oem-5.13 5.13.0-1017.21

Vulnerabilities 4

References

  • report
    https://ubuntu.com/security/CVE-2021-3739
  • report
    https://ubuntu.com/security/CVE-2021-3743
  • report
    https://ubuntu.com/security/CVE-2021-3753
  • report
    https://ubuntu.com/security/CVE-2021-3759