USN-4419-1: Linux kernel vulnerabilities<\/p>\n
It was discovered that a race condition existed in the Precision Time
\nProtocol (PTP) implementation in the Linux kernel, leading to a use-after-
\nfree vulnerability. A local attacker could possibly use this to cause a
\ndenial of service (system crash) or possibly execute arbitrary code.
\n(CVE-2020-10690)<\/p>\n
Matthew Sheets discovered that the SELinux network label handling
\nimplementation in the Linux kernel could be coerced into de-referencing a
\nNULL pointer. A remote attacker could use this to cause a denial of service
\n(system crash). (CVE-2020-10711)<\/p>\n
It was discovered that the DesignWare SPI controller driver in the Linux
\nkernel contained a race condition. A local attacker could possibly use this
\nto cause a denial of service (system crash). (CVE-2020-12769)<\/p>\n
It was discovered that the SCSI generic (sg) driver in the Linux kernel did
\nnot properly handle certain error conditions correctly. A local privileged
\nattacker could use this to cause a denial of service (system crash).
\n(CVE-2020-12770)<\/p>\n
It was discovered that the USB Gadget device driver in the Linux kernel did
\nnot validate arguments passed from configfs in some situations. A local
\nattacker could possibly use this to cause a denial of service (system
\ncrash) or possibly expose sensitive information. (CVE-2020-13143)<\/p>\n
Shijie Luo discovered that the ext4 file system implementation in the Linux USN-4419-1: Linux kernel vulnerabilities It was discovered that a race condition existed in the Precision Time Protocol (PTP) implementation in the Linux kernel, leading to a use-after- free vulnerability. A local attacker could possibly use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-10690) Matthew Sheets discovered that the SELinux network label handling implementation in the Linux kernel could be coerced into de-referencing a NULL pointer. A remote attacker could use this to cause a denial of service (system crash). (CVE-2020-10711) It was discovered that the DesignWare SPI controller driver in the Linux kernel contained a race condition. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2020-12769) It was discovered that the SCSI generic (sg) driver in the Linux kernel did not properly handle certain error conditions [ more… ]<\/a><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[586],"tags":[587],"class_list":["post-37538","post","type-post","status-publish","format-standard","hentry","category-ubuntu-usn","tag-ubuntu-usn"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/37538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/comments?post=37538"}],"version-history":[{"count":1,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/37538\/revisions"}],"predecessor-version":[{"id":37539,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/37538\/revisions\/37539"}],"wp:attachment":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/media?parent=37538"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/categories?post=37538"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/tags?post=37538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nkernel did not properly check for a too-large journal size. An attacker
\ncould use this to construct a malicious ext4 image that, when mounted,
\ncould cause a denial of service (soft lockup). (CVE-2020-8992)
\nSource: USN-4419-1: Linux kernel vulnerabilities<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"