USN-5219-1

Description

linux, linux-aws, linux-aws-5.11, linux-azure, linux-azure-5.11, linux-gcp, linux-gcp-5.11, linux-hwe-5.11, linux-kvm, linux-oem-5.10, linux-oracle, linux-oracle-5.11, linux-raspi vulnerability It was discovered that the eBPF implementation in the Linux kernel did not properly validate the memory size of certain ring buffer operation arguments. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.

Affected Systems

• ubuntu•linux-aws-5.11

  < 5.11.0-1025.27~20.04.1

• ubuntu•linux-azure-5.11

  < 5.11.0-1025.27~20.04.1

• ubuntu•linux-gcp-5.11

  < 5.11.0-1026.29~20.04.1

• ubuntu•linux-hwe-5.11

  < 5.11.0-46.51~20.04.1

• ubuntu•linux-oem-5.10

  < 5.10.0-1055.58

• ubuntu•linux-oracle-5.11

  < 5.11.0-1025.27~20.04.1

References (3)

• https://ubuntu.com/security/notices/USN-5219-1
• https://ubuntu.com/security/CVE-2021-4204
• https://launchpad.net/bugs/1956585