LSN-0076-1: linux Ubuntu
Vulnerability summary
LSN-0076-1 is a vulnerability in linux Ubuntu with no CVSS score yet.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 2 · Downstream 0Timeline
- 03-05-2021PublishedVulnerability first disclosed.
- 03-06-2026Last modifiedVulnerability information updated.
Description
Kernel Live Patch Security Notice It was discovered that the overlayfs implementation in the Linux kernel did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated privileges.(CVE-2021-3493) Piotr Krysiuk discovered that the BPF JIT compiler for x86 in the Linux kernel did not properly validate computation of branch displacements in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.(CVE-2021-29154)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Ubuntu13 products
- linux< 4.4.0-209.241 | < 4.15.0-142.146 | < 5.4.0-72.80
- linux-aws< 4.4.0-1127.141 | < 4.15.0-1099.106 | < 5.4.0-1045.47
- linux-azure< 4.15.0-1113.126~16.04.1 | < 5.4.0-1046.48
- linux-gcp< 5.4.0-1042.45
- linux-gke< 5.4.0-1042.44
1 vendor · 13 products