USN-5595-1
Advisory lineage Upstream: 4 Downstream: 0
Published: 02 Sept 2022, 21:48
Last modified:14 Sept 2026, 11:17
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
02 Sept 2022, 21:48
Published
Vulnerability first disclosed
14 Sept 2026, 11:17
Last Modified
Vulnerability information updated
Description
linux-aws-5.4, linux-azure-5.4 vulnerabilities Asaf Modelevsky discovered that the Intel(R) 10GbE PCI Express (ixgbe) Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. (CVE-2021-33061) It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33656)
Affected Systems
- ubuntu•linux-aws-5.4
< 5.4.0-1084.91~18.04.1
- ubuntu•linux-azure-5.4
< 5.4.0-1090.95~18.04.1