Skip to content
OpenAdvisories
Medium USN-5592-1 2 CVEs

linux-aws, linux-azure, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gke, linux-gkeop, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4 vulnerabilities

Published Sep 1, 2022 · Updated Sep 14, 2026

Ecosystem: Ubuntu

Summary

Asaf Modelevsky discovered that the Intel(R) 10GbE PCI Express (ixgbe)
Ethernet driver for the Linux kernel performed insufficient control flow
management. A local attacker could possibly use this to cause a denial of
service. (CVE-2021-33061)

It was discovered that the virtual terminal driver in the Linux kernel did
not properly handle VGA console font changes, leading to an out-of-bounds
write. A local attacker could use this to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2021-33656)

Fixed packages 12

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp-5.4 5.4.0-1087.95~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-ibm-5.4 5.4.0-1032.36~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-oracle-5.4 5.4.0-1082.90~18.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-aws 5.4.0-1084.91
Ubuntu · 20.04 LTS 20.04:LTS linux-azure 5.4.0-1090.95
Ubuntu · 20.04 LTS 20.04:LTS linux-bluefield 5.4.0-1045.50
Ubuntu · 20.04 LTS 20.04:LTS linux-gcp 5.4.0-1087.95
Ubuntu · 20.04 LTS 20.04:LTS linux-gke 5.4.0-1081.87
Ubuntu · 20.04 LTS 20.04:LTS linux-gkeop 5.4.0-1052.55
Ubuntu · 20.04 LTS 20.04:LTS linux-ibm 5.4.0-1032.36
Ubuntu · 20.04 LTS 20.04:LTS linux-kvm 5.4.0-1074.79
Ubuntu · 20.04 LTS 20.04:LTS linux-oracle 5.4.0-1082.90

Vulnerabilities 2

References

  • report
    https://ubuntu.com/security/CVE-2021-33061
  • report
    https://ubuntu.com/security/CVE-2021-33656