USN-4325-1
Advisory lineage Upstream: 4 Downstream: 0
Published: 07 Apr 2020, 23:25
Last modified:03 Jun 2026, 13:33
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
07 Apr 2020, 23:25
Published
Vulnerability first disclosed
03 Jun 2026, 13:33
Last Modified
Vulnerability information updated
Description
linux-azure, linux-gcp, linux-gke-5.0, linux-oem-osp1, linux-oracle-5.0 vulnerabilities It was discovered that the IPMI message handler implementation in the Linux kernel did not properly deallocate memory in certain situations. A local attacker could use this to cause a denial of service (kernel memory exhaustion). (CVE-2019-19046) Al Viro discovered that the vfs layer in the Linux kernel contained a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2020-8428)
Affected Systems
- ubuntu•linux-azure
< 5.0.0-1036.38
- ubuntu•linux-gcp
< 5.0.0-1034.35
- ubuntu•linux-gke-5.0
< 5.0.0-1033.34
- ubuntu•linux-oem-osp1
< 5.0.0-1047.52
- ubuntu•linux-oracle-5.0
< 5.0.0-1014.19