USN-4345-1

Advisory lineage Upstream: 18 Downstream: 0
Published: 28 Apr 2020, 23:54
Last modified:03 Jun 2026, 13:33

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 Apr 2020, 23:54
Published
Vulnerability first disclosed
03 Jun 2026, 13:33
Last Modified
Vulnerability information updated

Description

linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondary address mode. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2020-11884) It was discovered that the Intel Wi-Fi driver in the Linux kernel did not properly check for errors in some situations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2019-16234) Tristan Madani discovered that the block I/O tracing implementation in the Linux kernel contained a race condition. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2019-19768) It was discovered that the vhost net driver in the Linux kernel contained a stack buffer overflow. A local attacker with the ability to perform ioctl() calls on /dev/vhost-net could use this to cause a denial of service (system crash). (CVE-2020-10942) It was discovered that the OV51x USB Camera device driver in the Linux kernel did not properly validate device metadata. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2020-11608) It was discovered that the STV06XX USB Camera device driver in the Linux kernel did not properly validate device metadata. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2020-11609) It was discovered that the Xirlink C-It USB Camera device driver in the Linux kernel did not properly validate device metadata. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2020-11668) It was discovered that the virtual terminal implementation in the Linux kernel contained a race condition. A local attacker could possibly use this to cause a denial of service (system crash) or expose sensitive information. (CVE-2020-8648) Jordy Zomer discovered that the floppy driver in the Linux kernel did not properly check for errors in some situations. A local attacker could possibly use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2020-9383)

Affected Systems

  • ubuntu•linux

    < 4.15.0-99.100

  • ubuntu•linux-aws

    < 4.15.0-1066.70

  • ubuntu•linux-aws-hwe

    < 4.15.0-1066.70~16.04.1

  • ubuntu•linux-azure

    < 4.15.0-1082.92~16.04.1

  • ubuntu•linux-gcp

    < 4.15.0-1061.65

  • ubuntu•linux-gke-4.15

    < 4.15.0-1058.61

  • ubuntu•linux-hwe

    < 4.15.0-99.100~16.04.1

  • ubuntu•linux-kvm

    < 4.15.0-1059.60

  • ubuntu•linux-oem

    < 4.15.0-1080.90

  • ubuntu•linux-oracle

    < 4.15.0-1038.42~16.04.1 | < 4.15.0-1038.42

  • ubuntu•linux-raspi2

    < 4.15.0-1061.65

  • ubuntu•linux-snapdragon

    < 4.15.0-1077.84

References (10)