USN-5000-1: Linux kernel vulnerabilities<\/p>\n
Norbert Slusarek discovered a race condition in the CAN BCM networking
\nprotocol of the Linux kernel leading to multiple use-after-free
\nvulnerabilities. A local attacker could use this issue to execute arbitrary
\ncode. (CVE-2021-3609)<\/p>\n
Piotr Krysiuk discovered that the eBPF implementation in the Linux kernel
\ndid not properly enforce limits for pointer operations. A local attacker
\ncould use this to cause a denial of service (system crash) or possibly
\nexecute arbitrary code. (CVE-2021-33200)<\/p>\n
Mathy Vanhoef discovered that the Linux kernel\u2019s WiFi implementation did
\nnot properly clear received fragments from memory in some situations. A
\nphysically proximate attacker could possibly use this issue to inject
\npackets or expose sensitive information. (CVE-2020-24586)<\/p>\n
Mathy Vanhoef discovered that the Linux kernel\u2019s WiFi implementation
\nincorrectly handled encrypted fragments. A physically proximate attacker
\ncould possibly use this issue to decrypt fragments. (CVE-2020-24587)<\/p>\n
Mathy Vanhoef discovered that the Linux kernel\u2019s WiFi implementation
\nincorrectly handled certain malformed frames. If a user were tricked into
\nconnecting to a malicious server, a physically proximate attacker could use
\nthis issue to inject packets. (CVE-2020-24588)<\/p>\n
Mathy Vanhoef discovered that the Linux kernel\u2019s WiFi implementation
\nincorrectly handled EAPOL frames from unauthenticated senders. A physically
\nproximate attacker could inject malicious packets to cause a denial of
\nservice (system crash). (CVE-2020-26139)<\/p>\n
Mathy Vanhoef discovered that the Linux kernel\u2019s WiFi implementation did
\nnot properly verify certain fragmented frames. A physically proximate
\nattacker could possibly use this issue to inject or decrypt packets.
\n(CVE-2020-26141)<\/p>\n
Mathy Vanhoef discovered that the in the Linux kernel\u2019s WiFi implementation
\nleading to accepting plaintext fragments. A physically proximate attacker
\ncould use this issue to inject packets. (CVE-2020-26145)<\/p>\n
Mathy Vanhoef discovered that the the Linux kernel\u2019s WiFi implementation
\nleading to reassembling mixed encrypted and plaintext fragments. A
\nphysically proximate attacker could possibly use this issue to inject
\npackets or exfiltrate selected fragments. (CVE-2020-26147)<\/p>\n
Or Cohen discovered that the SCTP implementation in the Linux kernel
\ncontained a race condition in some situations, leading to a use-after-free
\ncondition. A local attacker could use this to cause a denial of service
\n(system crash) or possibly execute arbitrary code. (CVE-2021-23133)<\/p>\n
Or Cohen and Nadav Markus discovered a use-after-free vulnerability in the
\nnfc implementation in the Linux kernel. A privileged local attacker could
\nuse this issue to cause a denial of service (system crash) or possibly
\nexecute arbitrary code. (CVE-2021-23134)<\/p>\n
Piotr Krysiuk discovered that the eBPF implementation in the Linux kernel
\ndid not properly prevent speculative loads in certain situations. A local
\nattacker could use this to expose sensitive information (kernel memory).
\n(CVE-2021-31829)<\/p>\n
It was discovered that a race condition in the kernel Bluetooth subsystem
\ncan lead to use-after-free of slab objects. An attacker could use this
\nissue to possibly execute arbitrary code. (CVE-2021-32399)<\/p>\n
It was discovered that a use-after-free existed in the Bluetooth HCI driver
\nof the Linux kernel. A local attacker could use this to cause a denial of
\nservice (system crash) or possibly execute arbitrary code. (CVE-2021-33034)<\/p>\n
It was discovered that an out-of-bounds (OOB) memory access flaw in the USN-5000-1: Linux kernel vulnerabilities Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code. (CVE-2021-3609) Piotr Krysiuk discovered that the eBPF implementation in the Linux kernel did not properly enforce limits for pointer operations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33200) Mathy Vanhoef discovered that the Linux kernel\u2019s WiFi implementation did not properly clear received fragments from memory in some situations. A physically proximate attacker could possibly use this issue to inject packets or expose sensitive information. (CVE-2020-24586) Mathy Vanhoef discovered that the Linux kernel\u2019s WiFi implementation incorrectly handled encrypted fragments. A physically proximate attacker could possibly use this issue to decrypt fragments. (CVE-2020-24587) Mathy [ more… ]<\/a><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[586],"tags":[587],"class_list":["post-42180","post","type-post","status-publish","format-standard","hentry","category-ubuntu-usn","tag-ubuntu-usn"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/42180","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/comments?post=42180"}],"version-history":[{"count":1,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/42180\/revisions"}],"predecessor-version":[{"id":42181,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/42180\/revisions\/42181"}],"wp:attachment":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/media?parent=42180"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/categories?post=42180"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/tags?post=42180"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nf2fs module of the Linux kernel. A local attacker could use this issue to
\ncause a denial of service (system crash). (CVE-2021-3506)
\nSource: USN-5000-1: Linux kernel vulnerabilities<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"