Summary
Ilja Van Sprundel discovered that the SCTP implementation in the Linux
kernel did not properly perform size validations on incoming packets in
some situations. An attacker could possibly use this to expose sensitive
information (kernel memory). (CVE-2021-3655)
It was discovered that the Option USB High Speed Mobile device driver in
the Linux kernel did not properly handle error conditions. A physically
proximate attacker could use this to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2021-37159)
It was discovered that the AMD Cryptographic Coprocessor (CCP) driver in
the Linux kernel did not properly deallocate memory in some error
conditions. A local attacker could use this to cause a denial of service
(memory exhaustion). (CVE-2021-3744, CVE-2021-3764)
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws-5.4 | 5.4.0-1060.63~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure-5.4 | 5.4.0-1064.67~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-5.4 | 5.4.0-1058.62~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-5.4 | 5.4.0-1056.59~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gkeop-5.4 | 5.4.0-1027.28~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe-5.4 | 5.4.0-91.102~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle-5.4 | 5.4.0-1058.62~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi-5.4 | 5.4.0-1047.52~18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux | 5.4.0-91.102 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws | 5.4.0-1060.63 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure | 5.4.0-1064.67 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-bluefield | 5.4.0-1022.25 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gcp | 5.4.0-1058.62 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gke | 5.4.0-1056.59 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gkeop | 5.4.0-1027.28 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-ibm | 5.4.0-1008.9 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-kvm | 5.4.0-1050.52 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle | 5.4.0-1058.62 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-raspi | 5.4.0-1047.52 |
Vulnerabilities 4
-
Unscored —
A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP …
-
Unscored —
hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checkin…
-
Unscored —
A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c,…
-
Unscored —
A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a de…