Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Ubuntu 21.04: USN-4997-1 Critical: Kernel Execution Risks

ubuntu
Calendar Grey June 22, 2021
Dist Ubuntu Esm H88
A series of security flaws in the Linux kernel has been addressed in Ubuntu Security Notice USN-4997-1, impacting multiple platforms.
Several security issues were fixed in the Linux kernel.

Summary

Several security issues were fixed in the Linux kernel.

Software Description:

- linux: Linux kernel

- linux-aws: Linux kernel for Amazon Web Services (AWS) systems

- linux-azure: Linux kernel for Microsoft Azure Cloud systems

- linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems

- linux-oracle: Linux kernel for Oracle Cloud systems

- linux-raspi: Linux kernel for Raspberry Pi (V8) systems

Details:

Norbert Slusarek discovered a race condition in the CAN BCM networking

protocol of the Linux kernel leading to multiple use-after-free

vulnerabilities. A local attacker could use this issue to execute arbitrary

code. (CVE-2021-3609)

Piotr Krysiuk discovered that the eBPF implementation in the Linux kernel

did not properly enforce limits for pointer operations. A local attacker

could use this to cause a denial of service (system crash) or possibly

execute arbitrary code. (CVE-2021-33200)

Mathy Vanhoef discovered that the Linux kernel’s WiFi impleme...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory critical local attack kernel issue ubuntu execution risk

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
  linux-image-5.11.0-1009-azure   5.11.0-1009.9
  linux-image-5.11.0-1010-oracle  5.11.0-1010.10
  linux-image-5.11.0-1011-aws     5.11.0-1011.11
  linux-image-5.11.0-1011-gcp     5.11.0-1011.12
  linux-image-5.11.0-1012-raspi   5.11.0-1012.13
  linux-image-5.11.0-1012-raspi-nolpae  5.11.0-1012.13
  linux-image-5.11.0-22-generic   5.11.0-22.23
  linux-image-5.11.0-22-generic-64k  5.11.0-22.23
  linux-image-5.11.0-22-generic-lpae  5.11.0-22.23
  linux-image-5.11.0-22-lowlatency  5.11.0-22.23
  linux-image-aws                 5.11.0.1011.11
  linux-image-azure               5.11.0.1009.9
  linux-image-gcp                 5.11.0.1011.11
  linux-image-generic             5.11.0.22.23
  linux-image-generic-64k         5.11.0.22.23
  linux-image-generic-lpae        5.11.0.22.23
  linux-image-gke                 5.11.0.1011.11
  linux-image-lowlatency          5.11.0.22.23
  linux-image-oracle              5.11.0.1010.10
  linux-image-raspi               5.11.0.1012.10
  linux-image-raspi-nolpae        5.11.0.1012.10
  linux-image-virtual             5.11.0.22.23

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

  https://ubuntu.com/security/notices/USN-4997-1

  CVE-2020-24586, CVE-2020-24587, CVE-2020-24588, CVE-2020-26139,

  CVE-2020-26141, CVE-2020-26145, CVE-2020-26147, CVE-2021-23133,

  CVE-2021-23134, CVE-2021-31440, CVE-2021-31829, CVE-2021-32399,

  CVE-2021-33034, CVE-2021-33200, CVE-2021-3506, CVE-2021-3543,

  CVE-2021-3609

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory critical local attack kernel issue ubuntu execution risk

Package Information

  https://launchpad.net/ubuntu/+source/linux/5.11.0-22.23
  https://launchpad.net/ubuntu/+source/linux-aws/5.11.0-1011.11
  https://launchpad.net/ubuntu/+source/linux-azure/5.11.0-1009.9
  https://launchpad.net/ubuntu/+source/linux-gcp/5.11.0-1011.12
  https://launchpad.net/ubuntu/+source/linux-oracle/5.11.0-1010.10
  https://launchpad.net/ubuntu/+source/linux-raspi/5.11.0-1012.13

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here