LSN-0079-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 26 Jul 2021, 06:29
Last modified:23 May 2026, 01:30

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Jul 2021, 06:29
Published
Vulnerability first disclosed
23 May 2026, 01:30
Last Modified
Vulnerability information updated

Description

Kernel Live Patch Security Notice It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.(CVE-2021-3600) It was discovered that the virtual file system implementation in the Linux kernel contained an unsigned to signed integer conversion error. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code.(CVE-2021-33909)

Affected Systems

  • ubuntu•linux

    < 4.4.0-212.244 | < 4.15.0-151.157 | < 5.4.0-80.90 | all

  • ubuntu•linux-gcp

    < 5.4.0-1049.53 | all

  • ubuntu•linux-gke

    < 5.4.0-1049.52 | all

  • ubuntu•linux-gke-4.15

    all

  • ubuntu•linux-gke-5.4

    < 5.4.0-1049.52~18.04.1 | all

  • ubuntu•linux-gkeop

    < 5.4.0-1021.22 | all

  • ubuntu•linux-gkeop-5.4

    < 5.4.0-1021.22~18.04.1 | all

  • ubuntu•linux-hwe-5.4

    < 5.4.0-80.90~18.04.1 | all

  • ubuntu•linux-lts-xenial

    < 4.4.0-212.244~14.04.1 | all

  • ubuntu•linux-oem

    all

References (3)