USN-4945-2: Linux kernel (Raspberry Pi) vulnerabilities<\/p>\n
USN-4945-1 fixed vulnerabilities in the Linux kernel for Ubuntu
\n20.04 LTS and Ubuntu 18.04 LTS. This update provides the corresponding
\nLinux kernel updates targeted specifically for Raspberry Pi devices
\nin those same Ubuntu Releases.<\/p>\n
Original advisory details:<\/p>\n
It was discovered that the Nouveau GPU driver in the Linux kernel did not
\nproperly handle error conditions in some situations. A local attacker could
\nuse this to cause a denial of service (system crash). (CVE-2020-25639)<\/p>\n
Jan Beulich discovered that the Xen netback backend in the Linux kernel did
\nnot properly handle certain error conditions under paravirtualization. An
\nattacker in a guest VM could possibly use this to cause a denial of service
\n(host domain crash). (CVE-2021-28038)<\/p>\n
It was discovered that the fastrpc driver in the Linux kernel did not
\nprevent user space applications from sending kernel RPC messages. A local
\nattacker could possibly use this to gain elevated privileges.
\n(CVE-2021-28375)<\/p>\n
It was discovered that the Realtek RTL8188EU Wireless device driver in the
\nLinux kernel did not properly validate ssid lengths in some situations. An
\nattacker could use this to cause a denial of service (system crash).
\n(CVE-2021-28660)<\/p>\n
It was discovered that the USB\/IP driver in the Linux kernel contained race
\nconditions during the update of local and shared status. An attacker could
\nuse this to cause a denial of service (system crash). (CVE-2021-29265)<\/p>\n
It was discovered that a race condition existed in the netfilter subsystem
\nof the Linux kernel when replacing tables. A local attacker could use this
\nto cause a denial of service (system crash). (CVE-2021-29650)<\/p>\n
Arnd Bergmann discovered that the video4linux subsystem in the Linux kernel USN-4945-2: Linux kernel (Raspberry Pi) vulnerabilities USN-4945-1 fixed vulnerabilities in the Linux kernel for Ubuntu 20.04 LTS and Ubuntu 18.04 LTS. This update provides the corresponding Linux kernel updates targeted specifically for Raspberry Pi devices in those same Ubuntu Releases. Original advisory details: It was discovered that the Nouveau GPU driver in the Linux kernel did not properly handle error conditions in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-25639) Jan Beulich discovered that the Xen netback backend in the Linux kernel did not properly handle certain error conditions under paravirtualization. An attacker in a guest VM could possibly use this to cause a denial of service (host domain crash). (CVE-2021-28038) It was discovered that the fastrpc driver in the Linux kernel did not prevent user space applications from sending kernel [ more… ]<\/a><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[586],"tags":[587],"class_list":["post-41702","post","type-post","status-publish","format-standard","hentry","category-ubuntu-usn","tag-ubuntu-usn"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/41702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/comments?post=41702"}],"version-history":[{"count":1,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/41702\/revisions"}],"predecessor-version":[{"id":41703,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/41702\/revisions\/41703"}],"wp:attachment":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/media?parent=41702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/categories?post=41702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/tags?post=41702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\ndid not properly deallocate memory in some situations. A local attacker
\ncould use this to cause a denial of service (memory exhaustion).
\n(CVE-2021-30002)
\nSource: USN-4945-2: Linux kernel (Raspberry Pi) vulnerabilities<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"