USN-5045-1
Vulnerability Summary
Timeline
Description
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities Norbert Slusarek discovered that the CAN broadcast manger (bcm) protocol implementation in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2021-34693) It was discovered that the bluetooth subsystem in the Linux kernel did not properly handle HCI device initialization failure, leading to a double-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2021-3564) It was discovered that the bluetooth subsystem in the Linux kernel did not properly handle HCI device detach events, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2021-3573) It was discovered that the NFC implementation in the Linux kernel did not properly handle failed connect events leading to a NULL pointer dereference. A local attacker could use this to cause a denial of service. (CVE-2021-3587)
Affected Systems
- ubuntu•linux
< 5.4.0-81.91
- ubuntu•linux-aws
< 5.4.0-1055.58
- ubuntu•linux-aws-5.4
< 5.4.0-1055.58~18.04.1
- ubuntu•linux-azure
< 5.4.0-1056.58
- ubuntu•linux-azure-5.4
< 5.4.0-1056.58~18.04.1
- ubuntu•linux-gcp
< 5.4.0-1051.55
- ubuntu•linux-gcp-5.4
< 5.4.0-1051.55~18.04.1
- ubuntu•linux-gke
< 5.4.0-1051.54
- ubuntu•linux-gke-5.4
< 5.4.0-1051.54~18.04.1
- ubuntu•linux-gkeop
< 5.4.0-1022.23
- ubuntu•linux-gkeop-5.4
< 5.4.0-1022.23~18.04.1
- ubuntu•linux-hwe-5.4
< 5.4.0-81.91~18.04.1
- ubuntu•linux-kvm
< 5.4.0-1045.47
- ubuntu•linux-oracle
< 5.4.0-1053.57
- ubuntu•linux-oracle-5.4
< 5.4.0-1053.57~18.04.1
- ubuntu•linux-raspi
< 5.4.0-1042.46
- ubuntu•linux-raspi-5.4
< 5.4.0-1042.46~18.04.3