{"schemaVersion":3,"id":"USN-4679-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities\n\nIt was discovered that the console keyboard driver in the Linux kernel\ncontained a race condition. A local attacker could use this to expose\nsensitive information (kernel memory). (CVE-2020-25656)\n\nMinh Yuan discovered that the tty driver in the Linux kernel contained race\nconditions when handling fonts. A local attacker could possibly use this to\nexpose sensitive information (kernel memory). (CVE-2020-25668)\n\nKiyin (尹亮) discovered that the perf subsystem in the Linux kernel did\nnot properly deallocate memory in some situations. A privileged attacker\ncould use this to cause a denial of service (kernel memory exhaustion).\n(CVE-2020-25704)\n\nJinoh Kang discovered that the Xen event channel infrastructure in the\nLinux kernel contained a race condition. An attacker in guest could\npossibly use this to cause a denial of service (dom0 crash).\n(CVE-2020-27675)\n\nDaniel Axtens discovered that PowerPC RTAS implementation in the Linux\nkernel did not properly restrict memory accesses in some situations. A\nprivileged local attacker could use this to arbitrarily modify kernel\nmemory, potentially bypassing kernel lockdown restrictions.\n(CVE-2020-27777)\n\nMinh Yuan discovered that the framebuffer console driver in the Linux\nkernel did not properly handle fonts in some conditions. A local attacker\ncould use this to cause a denial of service (system crash) or possibly\nexpose sensitive information (kernel memory). (CVE-2020-28974)","dates":{"published":"2021-01-06T03:24:21.000Z","modified":"2026-06-03T13:33:50.020Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"linux","name":"linux","label":"linux","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux","purlType":"deb","versions":[{"text":"< 5.4.0-59.65","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-59.65","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws","name":"linux-aws","label":"linux-aws","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws","purlType":"deb","versions":[{"text":"< 5.4.0-1034.35","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1034.35","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws-5.4","name":"linux-aws-5.4","label":"linux-aws-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1034.35~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1034.35~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure","name":"linux-azure","label":"linux-azure","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure","purlType":"deb","versions":[{"text":"< 5.4.0-1035.36","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1035.36","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure-5.4","name":"linux-azure-5.4","label":"linux-azure-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1035.36~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1035.36~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gcp","name":"linux-gcp","label":"linux-gcp","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gcp","purlType":"deb","versions":[{"text":"< 5.4.0-1033.35","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1033.35","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gcp-5.4","name":"linux-gcp-5.4","label":"linux-gcp-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gcp-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1033.35~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1033.35~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gke-5.4","name":"linux-gke-5.4","label":"linux-gke-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gke-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1033.35~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1033.35~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-hwe-5.4","name":"linux-hwe-5.4","label":"linux-hwe-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-hwe-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-59.65~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-59.65~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-kvm","name":"linux-kvm","label":"linux-kvm","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-kvm","purlType":"deb","versions":[{"text":"< 5.4.0-1031.32","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1031.32","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oracle","name":"linux-oracle","label":"linux-oracle","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oracle","purlType":"deb","versions":[{"text":"< 5.4.0-1034.36","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1034.36","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oracle-5.4","name":"linux-oracle-5.4","label":"linux-oracle-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oracle-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1034.36~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1034.36~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-raspi","name":"linux-raspi","label":"linux-raspi","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-raspi","purlType":"deb","versions":[{"text":"< 5.4.0-1026.29","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1026.29","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-raspi-5.4","name":"linux-raspi-5.4","label":"linux-raspi-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-raspi-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1026.29~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1026.29~18.04.1","eol":null,"hubHref":null}],"affectedCount":14,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-4679-1","label":"ubuntu.com/security/notices/USN-4679-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-25656","label":"ubuntu.com/security/CVE-2020-25656","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-25668","label":"ubuntu.com/security/CVE-2020-25668","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-25704","label":"ubuntu.com/security/CVE-2020-25704","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-27675","label":"ubuntu.com/security/CVE-2020-27675","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-27777","label":"ubuntu.com/security/CVE-2020-27777","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-28974","label":"ubuntu.com/security/CVE-2020-28974","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2020-25656","CVE-2020-25668","CVE-2020-25704","CVE-2020-27675","CVE-2020-27777","CVE-2020-28974"],"downstream":[],"duplicates":[],"related":["CVE-2020-25656","CVE-2020-25668","CVE-2020-25704","CVE-2020-27675","CVE-2020-27777","CVE-2020-28974"]},"timeline":[{"kind":"published","date":"2021-01-06T03:24:21.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-03T13:33:50.020Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T22:05:38.359Z","stale":false,"partial":false}}