{"schemaVersion":3,"id":"USN-4660-2","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon regression\n\nUSN-4660-1 fixed vulnerabilities in the Linux kernel. Unfortunately,\nthat update introduced a regression in the software raid10 driver\nwhen used with fstrim that could lead to data corruption. This update\nfixes the problem.\n\nOriginal advisory details:\n\nIt was discovered that a race condition existed in the perf subsystem of\nthe Linux kernel, leading to a use-after-free vulnerability. An attacker\nwith access to the perf subsystem could use this to cause a denial of\nservice (system crash) or possibly execute arbitrary code. (CVE-2020-14351)\n\nIt was discovered that the frame buffer implementation in the Linux kernel\ndid not properly handle some edge cases in software scrollback. A local\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2020-14390)\n\nIt was discovered that the netfilter connection tracker for netlink in the\nLinux kernel did not properly perform bounds checking in some situations. A\nlocal attacker could use this to cause a denial of service (system crash).\n(CVE-2020-25211)\n\nIt was discovered that the Rados block device (rbd) driver in the Linux\nkernel did not properly perform privilege checks for access to rbd devices\nin some situations. A local attacker could use this to map or unmap rbd\nblock devices. (CVE-2020-25284)\n\nIt was discovered that a race condition existed in the hugetlb sysctl\nimplementation in the Linux kernel. A privileged attacker could use this to\ncause a denial of service (system crash). (CVE-2020-25285)\n\nIt was discovered that the block layer subsystem in the Linux kernel did\nnot properly handle zero-length requests. A local attacker could use this\nto cause a denial of service. (CVE-2020-25641)\n\nIt was discovered that the HDLC PPP implementation in the Linux kernel did\nnot properly validate input in some situations. A local attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2020-25643)\n\nIt was discovered that the GENEVE tunnel implementation in the Linux kernel\nwhen combined with IPSec did not properly select IP routes in some\nsituations. An attacker could use this to expose sensitive information\n(unencrypted network traffic). (CVE-2020-25645)\n\nIt was discovered that the framebuffer implementation in the Linux kernel\ndid not properly perform range checks in certain situations. A local\nattacker could use this to expose sensitive information (kernel memory).\n(CVE-2020-28915)\n\nIt was discovered that Power 9 processors could be coerced to expose\ninformation from the L1 cache in certain situations. A local attacker could\nuse this to expose sensitive information. (CVE-2020-4788)","dates":{"published":"2020-12-13T23:27:41.000Z","modified":"2026-04-22T10:10:12.202Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"linux","name":"linux","label":"linux","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux","purlType":"deb","versions":[{"text":"< 4.15.0-128.131","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-128.131","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws","name":"linux-aws","label":"linux-aws","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws","purlType":"deb","versions":[{"text":"< 4.15.0-1090.95","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1090.95","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws-hwe","name":"linux-aws-hwe","label":"linux-aws-hwe","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws-hwe","purlType":"deb","versions":[{"text":"< 4.15.0-1090.95~16.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1090.95~16.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure","name":"linux-azure","label":"linux-azure","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure","purlType":"deb","versions":[{"text":"< 4.15.0-1102.113~16.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1102.113~16.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure-4.15","name":"linux-azure-4.15","label":"linux-azure-4.15","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure-4.15","purlType":"deb","versions":[{"text":"< 4.15.0-1102.113","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1102.113","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gcp","name":"linux-gcp","label":"linux-gcp","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gcp","purlType":"deb","versions":[{"text":"< 4.15.0-1090.103~16.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1090.103~16.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gcp-4.15","name":"linux-gcp-4.15","label":"linux-gcp-4.15","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gcp-4.15","purlType":"deb","versions":[{"text":"< 4.15.0-1090.103","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1090.103","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gke-4.15","name":"linux-gke-4.15","label":"linux-gke-4.15","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gke-4.15","purlType":"deb","versions":[{"text":"< 4.15.0-1076.81","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1076.81","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-hwe","name":"linux-hwe","label":"linux-hwe","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-hwe","purlType":"deb","versions":[{"text":"< 4.15.0-128.131~16.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-128.131~16.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-kvm","name":"linux-kvm","label":"linux-kvm","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-kvm","purlType":"deb","versions":[{"text":"< 4.15.0-1081.83","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1081.83","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oracle","name":"linux-oracle","label":"linux-oracle","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oracle","purlType":"deb","versions":[{"text":"< 4.15.0-1061.67~16.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.15.0-1061.67","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1061.67~16.04.1 | < 4.15.0-1061.67","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-snapdragon","name":"linux-snapdragon","label":"linux-snapdragon","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-snapdragon","purlType":"deb","versions":[{"text":"< 4.15.0-1093.102","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1093.102","eol":null,"hubHref":null}],"affectedCount":12,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-4660-2","label":"ubuntu.com/security/notices/USN-4660-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://launchpad.net/bugs/1907262","label":"launchpad.net/bugs/1907262","hostname":"launchpad.net","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2020-12-13T23:27:41.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T10:10:12.202Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T12:49:32.839Z","stale":false,"partial":false}}