Summary
Asaf Modelevsky discovered that the Intel(R) 10GbE PCI Express (ixgbe)
Ethernet driver for the Linux kernel performed insufficient control flow
management. A local attacker could possibly use this to cause a denial of
service. (CVE-2021-33061)
It was discovered that the virtual terminal driver in the Linux kernel did
not properly handle VGA console font changes, leading to an out-of-bounds
write. A local attacker could use this to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2021-33656)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure-fde | 5.4.0-1090.95+cvm1.1 |
Vulnerabilities 2
-
Medium 5.5
Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticate…
-
Unscored —
When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.