Skip to content
OpenAdvisories
Unscored USN-5267-1 3 CVEs

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oracle, linux-oracle-5.4 vulnerabilities

Published Feb 3, 2022 · Updated Sep 9, 2026

Summary

It was discovered that the Bluetooth subsystem in the Linux kernel
contained a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2021-3640)

Likang Luo discovered that a race condition existed in the Bluetooth
subsystem of the Linux kernel, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2021-3752)

Luo Likang discovered that the FireDTV Firewire driver in the Linux kernel
did not properly perform bounds checking in some situations. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2021-42739)

Fixed packages 15

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux-aws-5.4 5.4.0-1064.67~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-azure-5.4 5.4.0-1068.71~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp-5.4 5.4.0-1063.67~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-gkeop-5.4 5.4.0-1032.33~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-hwe-5.4 5.4.0-97.110~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-oracle-5.4 5.4.0-1062.66~18.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux 5.4.0-97.110
Ubuntu · 20.04 LTS 20.04:LTS linux-aws 5.4.0-1064.67
Ubuntu · 20.04 LTS 20.04:LTS linux-azure 5.4.0-1068.71
Ubuntu · 20.04 LTS 20.04:LTS linux-bluefield 5.4.0-1026.29
Ubuntu · 20.04 LTS 20.04:LTS linux-gcp 5.4.0-1063.67
Ubuntu · 20.04 LTS 20.04:LTS linux-gkeop 5.4.0-1032.33
Ubuntu · 20.04 LTS 20.04:LTS linux-ibm 5.4.0-1013.14
Ubuntu · 20.04 LTS 20.04:LTS linux-kvm 5.4.0-1054.56
Ubuntu · 20.04 LTS 20.04:LTS linux-oracle 5.4.0-1062.66

Vulnerabilities 3

References

  • report
    https://ubuntu.com/security/CVE-2021-3640
  • report
    https://ubuntu.com/security/CVE-2021-3752
  • report
    https://ubuntu.com/security/CVE-2021-42739