Ubuntu update for linux-bluefield



Risk High
Patch available YES
Number of vulnerabilities 9
CVE-ID CVE-2019-19449
CVE-2020-36385
CVE-2021-3428
CVE-2021-34556
CVE-2021-35477
CVE-2021-3739
CVE-2021-3743
CVE-2021-3753
CVE-2021-3759
CWE-ID CWE-125
CWE-416
CWE-190
CWE-200
CWE-203
CWE-476
CWE-400
Exploitation vector Network
Public exploit N/A
Vulnerable software
 Ubuntu
Operating systems & Components / Operating system

linux-image-raspi (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-5.4.0-1046-raspi (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-5.4.0-1057-oracle (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-raspi2 (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-5.4.0-1021-bluefield (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-oracle-lts-20.04 (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-bluefield (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-raspi-hwe-18.04 (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-oracle (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-gke-5.4 (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-5.4.0-1055-gke (Ubuntu package)
Operating systems & Components / Operating system package or component

Vendor Canonical Ltd.

Security Bulletin

This security bulletin contains information about 9 vulnerabilities.

1) Out-of-bounds read

EUVDB-ID: #VU34984

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2019-19449

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).

Mitigation

Update the affected package linux-bluefield to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 20.04

linux-image-raspi (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1046-raspi (Ubuntu package): before 5.4.0-1046.50~18.04.1

linux-image-5.4.0-1057-oracle (Ubuntu package): before 5.4.0-1057.61~18.04.1

linux-image-raspi2 (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1021-bluefield (Ubuntu package): before 5.4.0-1021.24

linux-image-oracle-lts-20.04 (Ubuntu package): before 5.4.0.1057.57

linux-image-bluefield (Ubuntu package): before 5.4.0.1021.22

linux-image-raspi-hwe-18.04 (Ubuntu package): before 5.4.0.1046.49

linux-image-oracle (Ubuntu package): before 5.4.0.1057.61~18.04.37

linux-image-gke-5.4 (Ubuntu package): before 5.4.0.1055.58~18.04.20

linux-image-5.4.0-1055-gke (Ubuntu package): before 5.4.0-1055.58~18.04.1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5137-2


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Use-after-free

EUVDB-ID: #VU58332

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-36385

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in drivers/infiniband/core/ucma.c, because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. A local user can run a specially crafted program to trigger the use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package linux-bluefield to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 20.04

linux-image-raspi (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1046-raspi (Ubuntu package): before 5.4.0-1046.50~18.04.1

linux-image-5.4.0-1057-oracle (Ubuntu package): before 5.4.0-1057.61~18.04.1

linux-image-raspi2 (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1021-bluefield (Ubuntu package): before 5.4.0-1021.24

linux-image-oracle-lts-20.04 (Ubuntu package): before 5.4.0.1057.57

linux-image-bluefield (Ubuntu package): before 5.4.0.1021.22

linux-image-raspi-hwe-18.04 (Ubuntu package): before 5.4.0.1046.49

linux-image-oracle (Ubuntu package): before 5.4.0.1057.61~18.04.37

linux-image-gke-5.4 (Ubuntu package): before 5.4.0.1055.58~18.04.20

linux-image-5.4.0-1055-gke (Ubuntu package): before 5.4.0-1055.58~18.04.1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5137-2


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Integer overflow

EUVDB-ID: #VU51551

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3428

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to integer overflow in fs/ext4/extents.c in ext4_es_cache_extent() function, if an extent tree is corrupted in a crafted ext4 filesystem. A local user can mount a specially crafted filesystem and perform a denial of service (DoS) attack.

Mitigation

Update the affected package linux-bluefield to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 20.04

linux-image-raspi (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1046-raspi (Ubuntu package): before 5.4.0-1046.50~18.04.1

linux-image-5.4.0-1057-oracle (Ubuntu package): before 5.4.0-1057.61~18.04.1

linux-image-raspi2 (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1021-bluefield (Ubuntu package): before 5.4.0-1021.24

linux-image-oracle-lts-20.04 (Ubuntu package): before 5.4.0.1057.57

linux-image-bluefield (Ubuntu package): before 5.4.0.1021.22

linux-image-raspi-hwe-18.04 (Ubuntu package): before 5.4.0.1046.49

linux-image-oracle (Ubuntu package): before 5.4.0.1057.61~18.04.37

linux-image-gke-5.4 (Ubuntu package): before 5.4.0.1055.58~18.04.20

linux-image-5.4.0-1055-gke (Ubuntu package): before 5.4.0-1055.58~18.04.1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5137-2


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Information disclosure

EUVDB-ID: #VU64203

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-34556

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A local user can gain unauthorized access to sensitive information on the system.

Mitigation

Update the affected package linux-bluefield to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 20.04

linux-image-raspi (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1046-raspi (Ubuntu package): before 5.4.0-1046.50~18.04.1

linux-image-5.4.0-1057-oracle (Ubuntu package): before 5.4.0-1057.61~18.04.1

linux-image-raspi2 (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1021-bluefield (Ubuntu package): before 5.4.0-1021.24

linux-image-oracle-lts-20.04 (Ubuntu package): before 5.4.0.1057.57

linux-image-bluefield (Ubuntu package): before 5.4.0.1021.22

linux-image-raspi-hwe-18.04 (Ubuntu package): before 5.4.0.1046.49

linux-image-oracle (Ubuntu package): before 5.4.0.1057.61~18.04.37

linux-image-gke-5.4 (Ubuntu package): before 5.4.0.1055.58~18.04.20

linux-image-5.4.0-1055-gke (Ubuntu package): before 5.4.0-1055.58~18.04.1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5137-2


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Observable discrepancy

EUVDB-ID: #VU92412

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-35477

CWE-ID: CWE-203 - Observable discrepancy

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to observable discrepancy error. A local user can gain access to sensitive information.

Mitigation

Update the affected package linux-bluefield to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 20.04

linux-image-raspi (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1046-raspi (Ubuntu package): before 5.4.0-1046.50~18.04.1

linux-image-5.4.0-1057-oracle (Ubuntu package): before 5.4.0-1057.61~18.04.1

linux-image-raspi2 (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1021-bluefield (Ubuntu package): before 5.4.0-1021.24

linux-image-oracle-lts-20.04 (Ubuntu package): before 5.4.0.1057.57

linux-image-bluefield (Ubuntu package): before 5.4.0.1021.22

linux-image-raspi-hwe-18.04 (Ubuntu package): before 5.4.0.1046.49

linux-image-oracle (Ubuntu package): before 5.4.0.1057.61~18.04.37

linux-image-gke-5.4 (Ubuntu package): before 5.4.0.1055.58~18.04.20

linux-image-5.4.0-1055-gke (Ubuntu package): before 5.4.0-1055.58~18.04.1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5137-2


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) NULL pointer dereference

EUVDB-ID: #VU90666

Risk: Low

CVSSv4.0: 4.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3739

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to read data or crash the application.

The vulnerability exists due to NULL pointer dereference within the btrfs_rm_device() function in fs/btrfs/volumes.c. A local user can read data or crash the application.

Mitigation

Update the affected package linux-bluefield to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 20.04

linux-image-raspi (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1046-raspi (Ubuntu package): before 5.4.0-1046.50~18.04.1

linux-image-5.4.0-1057-oracle (Ubuntu package): before 5.4.0-1057.61~18.04.1

linux-image-raspi2 (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1021-bluefield (Ubuntu package): before 5.4.0-1021.24

linux-image-oracle-lts-20.04 (Ubuntu package): before 5.4.0.1057.57

linux-image-bluefield (Ubuntu package): before 5.4.0.1021.22

linux-image-raspi-hwe-18.04 (Ubuntu package): before 5.4.0.1046.49

linux-image-oracle (Ubuntu package): before 5.4.0.1057.61~18.04.37

linux-image-gke-5.4 (Ubuntu package): before 5.4.0.1055.58~18.04.20

linux-image-5.4.0-1055-gke (Ubuntu package): before 5.4.0-1055.58~18.04.1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5137-2


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Out-of-bounds read

EUVDB-ID: #VU63913

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3743

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service attack.

The vulnerability exists due to a boundary condition in the Qualcomm IPC router protocol in the Linux kernel. A local user can gain access to out-of-bounds memory to leak internal kernel information or perform a denial of service attack.

Mitigation

Update the affected package linux-bluefield to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 20.04

linux-image-raspi (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1046-raspi (Ubuntu package): before 5.4.0-1046.50~18.04.1

linux-image-5.4.0-1057-oracle (Ubuntu package): before 5.4.0-1057.61~18.04.1

linux-image-raspi2 (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1021-bluefield (Ubuntu package): before 5.4.0-1021.24

linux-image-oracle-lts-20.04 (Ubuntu package): before 5.4.0.1057.57

linux-image-bluefield (Ubuntu package): before 5.4.0.1021.22

linux-image-raspi-hwe-18.04 (Ubuntu package): before 5.4.0.1046.49

linux-image-oracle (Ubuntu package): before 5.4.0.1057.61~18.04.37

linux-image-gke-5.4 (Ubuntu package): before 5.4.0.1055.58~18.04.20

linux-image-5.4.0-1055-gke (Ubuntu package): before 5.4.0-1055.58~18.04.1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5137-2


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Out-of-bounds read

EUVDB-ID: #VU64210

Risk: Low

CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3753

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel. A local user can trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Update the affected package linux-bluefield to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 20.04

linux-image-raspi (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1046-raspi (Ubuntu package): before 5.4.0-1046.50~18.04.1

linux-image-5.4.0-1057-oracle (Ubuntu package): before 5.4.0-1057.61~18.04.1

linux-image-raspi2 (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1021-bluefield (Ubuntu package): before 5.4.0-1021.24

linux-image-oracle-lts-20.04 (Ubuntu package): before 5.4.0.1057.57

linux-image-bluefield (Ubuntu package): before 5.4.0.1021.22

linux-image-raspi-hwe-18.04 (Ubuntu package): before 5.4.0.1046.49

linux-image-oracle (Ubuntu package): before 5.4.0.1057.61~18.04.37

linux-image-gke-5.4 (Ubuntu package): before 5.4.0.1055.58~18.04.20

linux-image-5.4.0-1055-gke (Ubuntu package): before 5.4.0-1055.58~18.04.1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5137-2


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Resource exhaustion

EUVDB-ID: #VU63914

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-3759

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists in the Linux kernel’s ipc functionality of the memcg subsystem when user calls the semget function multiple times, creating semaphores. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package linux-bluefield to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 20.04

linux-image-raspi (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1046-raspi (Ubuntu package): before 5.4.0-1046.50~18.04.1

linux-image-5.4.0-1057-oracle (Ubuntu package): before 5.4.0-1057.61~18.04.1

linux-image-raspi2 (Ubuntu package): before 5.4.0.1046.81

linux-image-5.4.0-1021-bluefield (Ubuntu package): before 5.4.0-1021.24

linux-image-oracle-lts-20.04 (Ubuntu package): before 5.4.0.1057.57

linux-image-bluefield (Ubuntu package): before 5.4.0.1021.22

linux-image-raspi-hwe-18.04 (Ubuntu package): before 5.4.0.1046.49

linux-image-oracle (Ubuntu package): before 5.4.0.1057.61~18.04.37

linux-image-gke-5.4 (Ubuntu package): before 5.4.0.1055.58~18.04.20

linux-image-5.4.0-1055-gke (Ubuntu package): before 5.4.0-1055.58~18.04.1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5137-2


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###