Home[1] Files[2] News[3] &[SERVICES_TAB] Contact[4] Add New[5]
- Ubuntu Security Notice USN-5605-1[6]
- Authored by Ubuntu[7] | Site security.ubuntu.com[8]
-
Ubuntu Security Notice 5605-1 - Asaf Modelevsky discovered that the Intel 10GbE PCI Express Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.
- systems | linux[9], ubuntu[10]
- advisories | CVE-2021-33061[11], CVE-2021-33656[12]
- SHA-256 |
90229ee7d360ca1032c3774eb7541dd265334f14d1b68b0af1fdde07e84033cb
- Download[13] | Favorite[14] | View[15]
Change Mirror[16] Download[17]
==========================================================================
Ubuntu Security Notice USN-5605-1
September 09, 2022
linux-azure-fde vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux-azure-fde: Linux kernel for Microsoft Azure CVM cloud systems
Details:
Asaf Modelevsky discovered that the Intel(R) 10GbE PCI Express (ixgbe)
Ethernet driver for the Linux kernel performed insufficient control flow
management. A local attacker could possibly use this to cause a denial
of service. (CVE-2021-33061)
It was discovered that the virtual terminal driver in the Linux kernel
did not properly handle VGA console font changes, leading to an
out-of-bounds write. A local attacker could use this to cause a denial
of service (system crash) or possibly execute arbitrary code.
(CVE-2021-33656)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS:
linux-image-5.4.0-1090-azure-fde 5.4.0-1090.95+cvm1.1
linux-image-azure-fde 5.4.0.1090.95+cvm1.30
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-5605-1
CVE-2021-33061, CVE-2021-33656
Package Information:
https://launchpad.net/ubuntu/+source/linux-azure-fde/5.4.0-1090.95+cvm1.1
File Tags
- ActiveX[22] (932)
- Advisory[23] (78,150)
- Arbitrary[24] (15,244)
- BBS[25] (2,859)
- Bypass[26] (1,580)
- CGI[27] (1,013)
- Code Execution[28] (6,746)
- Conference[29] (671)
- Cracker[30] (799)
- CSRF[31] (3,275)
- DoS[32] (22,011)
- Encryption[33] (2,339)
- Exploit[34] (50,059)
- File Inclusion[35] (4,158)
- File Upload[36] (945)
- Firewall[37] (821)
- Info Disclosure[38] (2,564)
- Intrusion Detection[39] (859)
- Java[40] (2,822)
- JavaScript[41] (803)
- Kernel[42] (6,138)
- Local[43] (14,077)
- Magazine[44] (586)
- Overflow[45] (12,245)
- Perl[46] (1,413)
- PHP[47] (5,055)
- Proof of Concept[48] (2,284)
- Protocol[49] (3,340)
- Python[50] (1,404)
- Remote[51] (29,822)
- Root[52] (3,462)
- Ruby[53] (578)
- Scanner[54] (1,630)
- Security Tool[55] (7,730)
- Shell[56] (3,071)
- Shellcode[57] (1,203)
- Sniffer[58] (883)
- Spoof[59] (2,116)
- SQL Injection[60] (16,050)
- TCP[61] (2,368)
- Trojan[62] (680)
- UDP[63] (871)
- Virus[64] (660)
- Vulnerability[65] (30,616)
- Web[66] (9,092)
- Whitepaper[67] (3,723)
- x86[68] (943)
- XSS[69] (17,376)
- Other[70]
File Archives
- September 2022[71]
- August 2022[72]
- July 2022[73]
- June 2022[74]
- May 2022[75]
- April 2022[76]
- March 2022[77]
- February 2022[78]
- January 2022[79]
- December 2021[80]
- November 2021[81]
- October 2021[82]
- Older[83]
Systems
- AIX[84] (426)
- Apple[85] (1,895)
- BSD[86] (369)
- CentOS[87] (55)
- Cisco[88] (1,915)
- Debian[89] (5,948)
- Fedora[90] (1,690)
- FreeBSD[91] (1,242)
- Gentoo[92] (4,197)
- HPUX[93] (878)
- iOS[94] (321)
- iPhone[95] (108)
- IRIX[96] (220)
- Juniper[97] (67)
- Linux[98] (42,800)
- Mac OS X[99] (684)
- Mandriva[100] (3,105)
- NetBSD[101] (255)
- OpenBSD[102] (478)
- RedHat[103] (11,940)
- Slackware[104] (941)
- Solaris[105] (1,607)
- SUSE[106] (1,444)
- Ubuntu[107] (7,985)
- UNIX[108] (9,109)
- UnixWare[109] (185)
- Windows[110] (6,465)
- Other[111]
Read more https://packetstormsecurity.com/files/168335/USN-5605-1.txt