Summary
It was discovered that the eBPF implementation in the Linux kernel did
not properly validate the memory size of certain ring buffer operation
arguments. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws-5.11 | 5.11.0-1025.27~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure-5.11 | 5.11.0-1025.27~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gcp-5.11 | 5.11.0-1026.29~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-hwe-5.11 | 5.11.0-46.51~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oem-5.10 | 5.10.0-1055.58 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle-5.11 | 5.11.0-1025.27~20.04.1 |
Vulnerabilities 1
-
Unscored —CVE-2021-4204 Public exploit
An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. Thi…