USN-4319-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 10 Apr 2020, 18:10
Last modified:03 Jun 2026, 13:33

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

10 Apr 2020, 18:10
Published
Vulnerability first disclosed
03 Jun 2026, 13:33
Last Modified
Vulnerability information updated

Description

linux, linux-aws, linux-gcp, linux-gcp-5.3, linux-hwe, linux-kvm, linux-oracle, linux-oracle-5.3, linux-raspi2, linux-raspi2-5.3 vulnerabilities It was discovered that the IPMI message handler implementation in the Linux kernel did not properly deallocate memory in certain situations. A local attacker could use this to cause a denial of service (kernel memory exhaustion). (CVE-2019-19046) Al Viro discovered that the vfs layer in the Linux kernel contained a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2020-8428)

Affected Systems

  • ubuntu•linux-azure-5.3

    < 5.3.0-1019.20~18.04.1

  • ubuntu•linux-gcp-5.3

    < 5.3.0-1017.18~18.04.1

  • ubuntu•linux-hwe

    < 5.3.0-46.38~18.04.1

  • ubuntu•linux-oracle-5.3

    < 5.3.0-1014.15~18.04.1

  • ubuntu•linux-raspi2-5.3

    < 5.3.0-1022.24~18.04.1

References (3)