Ubuntu update for linux
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 3 |
| CVE-ID | CVE-2021-37159 CVE-2021-3744 CVE-2021-3764 |
| CWE-ID | CWE-415 CWE-401 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
Ubuntu Operating systems & Components / Operating system linux-image-oracle (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gke (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-raspi2 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oracle-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1112-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1099-raspi2 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1084-oracle (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-snapdragon (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-dell300x (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-163-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1116-snapdragon (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1103-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1031-dell300x (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-163-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-163-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1127-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1116-aws (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws-hwe (Ubuntu package) Operating systems & Components / Operating system package or component |
| Vendor | Canonical Ltd. |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
1) Double Free
EUVDB-ID: #VU63575
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-37159
CWE-ID:
CWE-415 - Double Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to hso_free_net_device() function in drivers/net/usb/hso.c in the Linux kernel calls unregister_netdev without checking for the NETREG_REGISTERED state. A local user can trigger double free and use-after-free errors and execute arbitrary code with elevated privileges.
MitigationUpdate the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 14.04 - 18.04
linux-image-oracle (Ubuntu package): before 5.11.0.1021.22~20.04.14
linux-image-gcp (Ubuntu package): before 5.11.0.1022.24~20.04.21
linux-image-gke (Ubuntu package): before 5.11.0.1022.22
linux-image-azure (Ubuntu package): before 5.11.0.1021.22~20.04.21
linux-image-oem (Ubuntu package): before 5.4.0.90.94
linux-image-virtual-hwe-16.04 (Ubuntu package): before 4.15.0.187.173
linux-image-lowlatency-hwe-16.04 (Ubuntu package): before 4.15.0.187.173
linux-image-generic-hwe-16.04 (Ubuntu package): before 4.15.0.187.173
linux-image-raspi2 (Ubuntu package): before 4.15.0.1099.97
linux-image-oracle-lts-18.04 (Ubuntu package): before 4.15.0.1084.94
linux-image-gcp-lts-18.04 (Ubuntu package): before 4.15.0.1112.131
linux-image-4.15.0-1112-gcp (Ubuntu package): before 4.15.0-1112.126
linux-image-4.15.0-1099-raspi2 (Ubuntu package): before 4.15.0-1099.106
linux-image-4.15.0-1084-oracle (Ubuntu package): before 4.15.0-1084.92
linux-image-snapdragon (Ubuntu package): before 4.15.0.1116.119
linux-image-kvm (Ubuntu package): before 4.15.0.1103.99
linux-image-generic-lpae (Ubuntu package): before 4.15.0.163.152
linux-image-dell300x (Ubuntu package): before 4.15.0.1031.33
linux-image-azure-lts-18.04 (Ubuntu package): before 4.15.0.1127.100
linux-image-4.15.0-163-generic-lpae (Ubuntu package): before 4.15.0-163.171
linux-image-4.15.0-1116-snapdragon (Ubuntu package): before 4.15.0-1116.125
linux-image-4.15.0-1103-kvm (Ubuntu package): before 4.15.0-1103.105
linux-image-4.15.0-1031-dell300x (Ubuntu package): before 4.15.0-1031.36
linux-image-virtual (Ubuntu package): before 4.15.0.163.152
linux-image-lowlatency (Ubuntu package): before 4.15.0.163.152
linux-image-generic (Ubuntu package): before 4.15.0.163.152
linux-image-aws-lts-18.04 (Ubuntu package): before 4.15.0.1116.119
linux-image-4.15.0-163-lowlatency (Ubuntu package): before 4.15.0-163.171
linux-image-4.15.0-163-generic (Ubuntu package): before 4.15.0-163.171
linux-image-4.15.0-1127-azure (Ubuntu package): before 4.15.0-1127.140
linux-image-4.15.0-1116-aws (Ubuntu package): before 4.15.0-1116.123
linux-image-aws-hwe (Ubuntu package): before 4.15.0.1099.92
CPE2.3- cpe:2.3:o:canonical:ubuntu:14.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu:16.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu:18.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-gcp_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-gke_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-virtual-hwe-16.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-lowlatency-hwe-16.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-generic-hwe-16.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-raspi2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-oracle-lts-18.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-gcp-lts-18.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1112-gcp_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1099-raspi2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1084-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-snapdragon_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-dell300x_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-azure-lts-18.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-163-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1116-snapdragon_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1103-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1031-dell300x_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-aws-lts-18.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-163-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-163-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1127-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1116-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-aws-hwe_ubuntu_package:*:*:*:*:*:ubuntu:*:*
http://ubuntu.com/security/notices/USN-5164-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Memory leak
EUVDB-ID: #VU63813
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-3744
CWE-ID:
CWE-401 - Missing release of memory after effective lifetime
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform DoS attack on the target system.
The vulnerability exists due memory leak in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c. A local user can force the application to leak memory and perform denial of service attack.
MitigationUpdate the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 14.04 - 18.04
linux-image-oracle (Ubuntu package): before 5.11.0.1021.22~20.04.14
linux-image-gcp (Ubuntu package): before 5.11.0.1022.24~20.04.21
linux-image-gke (Ubuntu package): before 5.11.0.1022.22
linux-image-azure (Ubuntu package): before 5.11.0.1021.22~20.04.21
linux-image-oem (Ubuntu package): before 5.4.0.90.94
linux-image-virtual-hwe-16.04 (Ubuntu package): before 4.15.0.187.173
linux-image-lowlatency-hwe-16.04 (Ubuntu package): before 4.15.0.187.173
linux-image-generic-hwe-16.04 (Ubuntu package): before 4.15.0.187.173
linux-image-raspi2 (Ubuntu package): before 4.15.0.1099.97
linux-image-oracle-lts-18.04 (Ubuntu package): before 4.15.0.1084.94
linux-image-gcp-lts-18.04 (Ubuntu package): before 4.15.0.1112.131
linux-image-4.15.0-1112-gcp (Ubuntu package): before 4.15.0-1112.126
linux-image-4.15.0-1099-raspi2 (Ubuntu package): before 4.15.0-1099.106
linux-image-4.15.0-1084-oracle (Ubuntu package): before 4.15.0-1084.92
linux-image-snapdragon (Ubuntu package): before 4.15.0.1116.119
linux-image-kvm (Ubuntu package): before 4.15.0.1103.99
linux-image-generic-lpae (Ubuntu package): before 4.15.0.163.152
linux-image-dell300x (Ubuntu package): before 4.15.0.1031.33
linux-image-azure-lts-18.04 (Ubuntu package): before 4.15.0.1127.100
linux-image-4.15.0-163-generic-lpae (Ubuntu package): before 4.15.0-163.171
linux-image-4.15.0-1116-snapdragon (Ubuntu package): before 4.15.0-1116.125
linux-image-4.15.0-1103-kvm (Ubuntu package): before 4.15.0-1103.105
linux-image-4.15.0-1031-dell300x (Ubuntu package): before 4.15.0-1031.36
linux-image-virtual (Ubuntu package): before 4.15.0.163.152
linux-image-lowlatency (Ubuntu package): before 4.15.0.163.152
linux-image-generic (Ubuntu package): before 4.15.0.163.152
linux-image-aws-lts-18.04 (Ubuntu package): before 4.15.0.1116.119
linux-image-4.15.0-163-lowlatency (Ubuntu package): before 4.15.0-163.171
linux-image-4.15.0-163-generic (Ubuntu package): before 4.15.0-163.171
linux-image-4.15.0-1127-azure (Ubuntu package): before 4.15.0-1127.140
linux-image-4.15.0-1116-aws (Ubuntu package): before 4.15.0-1116.123
linux-image-aws-hwe (Ubuntu package): before 4.15.0.1099.92
CPE2.3- cpe:2.3:o:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-gcp_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-gke_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-virtual-hwe-16.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-lowlatency-hwe-16.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-generic-hwe-16.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-raspi2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-oracle-lts-18.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-gcp-lts-18.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1112-gcp_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1099-raspi2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1084-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-snapdragon_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-dell300x_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-azure-lts-18.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-163-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1116-snapdragon_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1103-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1031-dell300x_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-aws-lts-18.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-163-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-163-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1127-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1116-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-aws-hwe_ubuntu_package:*:*:*:*:*:ubuntu:*:*
http://ubuntu.com/security/notices/USN-5164-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Memory leak
EUVDB-ID: #VU63817
Risk: Medium
CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2021-3764
CWE-ID:
CWE-401 - Missing release of memory after effective lifetime
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak error in the ccp_run_aes_gcm_cmd() function in Linux kernel. A local user can trigger a memory leak error and perform a denial of service (DoS) attack.
MitigationUpdate the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 14.04 - 18.04
linux-image-oracle (Ubuntu package): before 5.11.0.1021.22~20.04.14
linux-image-gcp (Ubuntu package): before 5.11.0.1022.24~20.04.21
linux-image-gke (Ubuntu package): before 5.11.0.1022.22
linux-image-azure (Ubuntu package): before 5.11.0.1021.22~20.04.21
linux-image-oem (Ubuntu package): before 5.4.0.90.94
linux-image-virtual-hwe-16.04 (Ubuntu package): before 4.15.0.187.173
linux-image-lowlatency-hwe-16.04 (Ubuntu package): before 4.15.0.187.173
linux-image-generic-hwe-16.04 (Ubuntu package): before 4.15.0.187.173
linux-image-raspi2 (Ubuntu package): before 4.15.0.1099.97
linux-image-oracle-lts-18.04 (Ubuntu package): before 4.15.0.1084.94
linux-image-gcp-lts-18.04 (Ubuntu package): before 4.15.0.1112.131
linux-image-4.15.0-1112-gcp (Ubuntu package): before 4.15.0-1112.126
linux-image-4.15.0-1099-raspi2 (Ubuntu package): before 4.15.0-1099.106
linux-image-4.15.0-1084-oracle (Ubuntu package): before 4.15.0-1084.92
linux-image-snapdragon (Ubuntu package): before 4.15.0.1116.119
linux-image-kvm (Ubuntu package): before 4.15.0.1103.99
linux-image-generic-lpae (Ubuntu package): before 4.15.0.163.152
linux-image-dell300x (Ubuntu package): before 4.15.0.1031.33
linux-image-azure-lts-18.04 (Ubuntu package): before 4.15.0.1127.100
linux-image-4.15.0-163-generic-lpae (Ubuntu package): before 4.15.0-163.171
linux-image-4.15.0-1116-snapdragon (Ubuntu package): before 4.15.0-1116.125
linux-image-4.15.0-1103-kvm (Ubuntu package): before 4.15.0-1103.105
linux-image-4.15.0-1031-dell300x (Ubuntu package): before 4.15.0-1031.36
linux-image-virtual (Ubuntu package): before 4.15.0.163.152
linux-image-lowlatency (Ubuntu package): before 4.15.0.163.152
linux-image-generic (Ubuntu package): before 4.15.0.163.152
linux-image-aws-lts-18.04 (Ubuntu package): before 4.15.0.1116.119
linux-image-4.15.0-163-lowlatency (Ubuntu package): before 4.15.0-163.171
linux-image-4.15.0-163-generic (Ubuntu package): before 4.15.0-163.171
linux-image-4.15.0-1127-azure (Ubuntu package): before 4.15.0-1127.140
linux-image-4.15.0-1116-aws (Ubuntu package): before 4.15.0-1116.123
linux-image-aws-hwe (Ubuntu package): before 4.15.0.1099.92
CPE2.3- cpe:2.3:o:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-gcp_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-gke_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-virtual-hwe-16.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-lowlatency-hwe-16.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-generic-hwe-16.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-raspi2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-oracle-lts-18.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-gcp-lts-18.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1112-gcp_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1099-raspi2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1084-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-snapdragon_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-dell300x_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-azure-lts-18.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-163-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1116-snapdragon_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1103-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1031-dell300x_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-aws-lts-18.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-163-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-163-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1127-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-4.15.0-1116-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
- cpe:2.3:o:canonical:linux-image-aws-hwe_ubuntu_package:*:*:*:*:*:ubuntu:*:*
http://ubuntu.com/security/notices/USN-5164-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
