UBUNTU-CVE-2021-34693
Vulnerability Summary
Timeline
Description
net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Systems
- ubuntu•linux
all | < 4.4.0-219.252 | < 4.15.0-156.163 | < 5.4.0-81.91
- ubuntu•linux-aws
< 4.4.0-1099.104 | < 4.4.0-1135.149 | < 4.15.0-1111.118 | < 5.4.0-1055.58
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
< 5.11.0-1017.18~20.04.1
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
< 5.4.0-1055.58~18.04.1
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-fips
< 4.15.0-2053.55 | all | < 5.4.0-1069.73+fips2
- ubuntu•linux-aws-hwe
< 4.15.0-1111.118~16.04.1
- ubuntu•linux-azure
< 4.15.0-1123.136~14.04.1 | < 4.15.0-1123.136~16.04.1 | all | < 5.4.0-1056.58
- ubuntu•linux-azure-4.15
< 4.15.0-1123.136
- ubuntu•linux-azure-5.11
< 5.11.0-1015.16~20.04.1
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
< 5.4.0-1056.58~18.04.1
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fips
< 4.15.0-2035.39 | all | < 5.4.0-1073.76+fips1
- ubuntu•linux-bluefield
< 5.4.0-1019.22 | all
- ubuntu•linux-dell300x
< 4.15.0-1027.32
- ubuntu•linux-fips
< 4.4.0-1069.75 | all | < 4.15.0-1069.78 | < 5.4.0-1032.37
- ubuntu•linux-gcp
< 4.15.0-1108.122~16.04.1 | all | < 5.4.0-1051.55
- ubuntu•linux-gcp-4.15
< 4.15.0-1108.122
- ubuntu•linux-gcp-5.11
< 5.11.0-1018.20~20.04.2
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.4
< 5.4.0-1051.55~18.04.1
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gcp-edge
all
- ubuntu•linux-gcp-fips
< 4.15.0-2018.20 | all | < 5.4.0-1067.71~20.04.1
- ubuntu•linux-gke
< 5.4.0-1051.54
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.4
< 5.4.0-1051.54~18.04.1
- ubuntu•linux-gkeop
< 5.4.0-1022.23
- ubuntu•linux-gkeop-5.4
< 5.4.0-1022.23~18.04.1
- ubuntu•linux-hwe
< 4.15.0-156.163~16.04.1 | all
- ubuntu•linux-hwe-5.11
< 5.11.0-34.36~20.04.1
- ubuntu•linux-hwe-5.4
< 5.4.0-81.91~18.04.1
- ubuntu•linux-hwe-5.8
all
- ubuntu•linux-hwe-edge
all | all
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-kvm
< 4.4.0-1100.109 | < 4.15.0-1099.101 | < 5.4.0-1045.47
- ubuntu•linux-lts-xenial
< 4.4.0-219.252~14.04.1
- ubuntu•linux-nvidia
all
- ubuntu•linux-oem
all
- ubuntu•linux-oem-5.10
< 5.10.0-1038.40
- ubuntu•linux-oem-5.6
all
- ubuntu•linux-oracle
< 4.15.0-1080.88~16.04.1 | < 4.15.0-1080.88 | < 5.4.0-1053.57
- ubuntu•linux-oracle-5.0
all
- ubuntu•linux-oracle-5.11
< 5.11.0-1017.18~20.04.1
- ubuntu•linux-oracle-5.3
all
- ubuntu•linux-oracle-5.4
< 5.4.0-1053.57~18.04.1
Showing first 50 affected entries in server-rendered view.
References (11)
- https://ubuntu.com/security/CVE-2021-34693
- https://lore.kernel.org/netdev/trinity-87eaea25-2a7d-4aa9-92a5-269b822e5d95-1623609211076@3c-app-gmx-bs04/T/
- https://www.openwall.com/lists/oss-security/2021/06/15/1
- https://ubuntu.com/security/notices/USN-5045-1
- https://ubuntu.com/security/notices/USN-5070-1
- https://ubuntu.com/security/notices/USN-5073-1
- https://ubuntu.com/security/notices/USN-5073-2
- https://ubuntu.com/security/notices/USN-5073-3
- https://ubuntu.com/security/notices/USN-5299-1
- https://ubuntu.com/security/notices/USN-5343-1
- https://www.cve.org/CVERecord?id=CVE-2021-34693