Summary
Nadav Amit discovered that the hugetlb implementation in the Linux kernel
did not perform TLB flushes under certain conditions. A local attacker
could use this to leak or alter data from other processes that use huge
pages.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux | 3.13.0-189.240 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-aws | 4.4.0-1098.103 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-lts-xenial | 4.4.0-218.251~14.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux | 4.4.0-218.251 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-aws | 4.4.0-1134.148 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-kvm | 4.4.0-1099.108 |
Vulnerabilities 1
-
Unscored —
A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memo…
References
-
report
https://ubuntu.com/security/CVE-2021-4002