Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5116-2)

high Nessus Plugin ID 154352

Language:

Synopsis

The remote Ubuntu host is missing one or more security updates.

Description

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5116-2 advisory.

 - The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.
 (CVE-2021-42008)

 - u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150 (CVE-2020-3702)

 - arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault. (CVE-2021-38198)

 - drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real IOMEM pointer). (CVE-2021-38205)

 - A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13. (CVE-2021-40490)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://ubuntu.com/security/notices/USN-5116-2

Plugin Details

Severity: High

ID: 154352

File Name: ubuntu_USN-5116-2.nasl

Version: 1.5

Type: local

Agent: unix

Published: 10/22/2021

Updated: 1/17/2023

Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 6.9

Temporal Score: 5.1

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: E:U/RL:OF/RC:C

CVSS Score Source: CVE-2021-42008

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:canonical:ubuntu_linux:18.04:-:lts, cpe:/o:canonical:ubuntu_linux:20.04:-:lts, p-cpe:/a:canonical:ubuntu_linux:linux-aws, p-cpe:/a:canonical:ubuntu_linux:linux-aws-5.4-cloud-tools-5.4.0-1058, p-cpe:/a:canonical:ubuntu_linux:linux-aws-5.4-headers-5.4.0-1058, p-cpe:/a:canonical:ubuntu_linux:linux-aws-5.4-tools-5.4.0-1058, p-cpe:/a:canonical:ubuntu_linux:linux-aws-cloud-tools-5.4.0-1058, p-cpe:/a:canonical:ubuntu_linux:linux-aws-edge, p-cpe:/a:canonical:ubuntu_linux:linux-aws-headers-5.4.0-1058, p-cpe:/a:canonical:ubuntu_linux:linux-aws-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-aws-tools-5.4.0-1058, p-cpe:/a:canonical:ubuntu_linux:linux-azure, p-cpe:/a:canonical:ubuntu_linux:linux-azure-5.4-cloud-tools-5.4.0-1062, p-cpe:/a:canonical:ubuntu_linux:linux-azure-5.4-headers-5.4.0-1062, p-cpe:/a:canonical:ubuntu_linux:linux-azure-5.4-tools-5.4.0-1062, p-cpe:/a:canonical:ubuntu_linux:linux-azure-cloud-tools-5.4.0-1062, p-cpe:/a:canonical:ubuntu_linux:linux-azure-edge, p-cpe:/a:canonical:ubuntu_linux:linux-azure-headers-5.4.0-1062, p-cpe:/a:canonical:ubuntu_linux:linux-azure-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-azure-tools-5.4.0-1062, p-cpe:/a:canonical:ubuntu_linux:linux-buildinfo-5.4.0-1025-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-buildinfo-5.4.0-1045-raspi, p-cpe:/a:canonical:ubuntu_linux:linux-buildinfo-5.4.0-1054-gke, p-cpe:/a:canonical:ubuntu_linux:linux-buildinfo-5.4.0-1056-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-buildinfo-5.4.0-1058-aws, p-cpe:/a:canonical:ubuntu_linux:linux-buildinfo-5.4.0-1062-azure, p-cpe:/a:canonical:ubuntu_linux:linux-cloud-tools-5.4.0-1025-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-cloud-tools-5.4.0-1058-aws, p-cpe:/a:canonical:ubuntu_linux:linux-cloud-tools-5.4.0-1062-azure, p-cpe:/a:canonical:ubuntu_linux:linux-cloud-tools-azure, p-cpe:/a:canonical:ubuntu_linux:linux-cloud-tools-azure-edge, p-cpe:/a:canonical:ubuntu_linux:linux-cloud-tools-azure-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-cloud-tools-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-cloud-tools-gkeop-5.4, p-cpe:/a:canonical:ubuntu_linux:linux-gke, p-cpe:/a:canonical:ubuntu_linux:linux-gke-5.4, p-cpe:/a:canonical:ubuntu_linux:linux-gke-5.4-headers-5.4.0-1054, p-cpe:/a:canonical:ubuntu_linux:linux-gke-5.4-tools-5.4.0-1054, p-cpe:/a:canonical:ubuntu_linux:linux-gke-headers-5.4.0-1054, p-cpe:/a:canonical:ubuntu_linux:linux-gke-tools-5.4.0-1054, p-cpe:/a:canonical:ubuntu_linux:linux-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-gkeop-5.4, p-cpe:/a:canonical:ubuntu_linux:linux-gkeop-5.4-cloud-tools-5.4.0-1025, p-cpe:/a:canonical:ubuntu_linux:linux-gkeop-5.4-headers-5.4.0-1025, p-cpe:/a:canonical:ubuntu_linux:linux-gkeop-5.4-source-5.4.0, p-cpe:/a:canonical:ubuntu_linux:linux-gkeop-5.4-tools-5.4.0-1025, p-cpe:/a:canonical:ubuntu_linux:linux-gkeop-cloud-tools-5.4.0-1025, p-cpe:/a:canonical:ubuntu_linux:linux-gkeop-headers-5.4.0-1025, p-cpe:/a:canonical:ubuntu_linux:linux-gkeop-source-5.4.0, p-cpe:/a:canonical:ubuntu_linux:linux-gkeop-tools-5.4.0-1025, p-cpe:/a:canonical:ubuntu_linux:linux-headers-5.4.0-1025-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-headers-5.4.0-1045-raspi, p-cpe:/a:canonical:ubuntu_linux:linux-headers-5.4.0-1054-gke, p-cpe:/a:canonical:ubuntu_linux:linux-headers-5.4.0-1056-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-headers-5.4.0-1058-aws, p-cpe:/a:canonical:ubuntu_linux:linux-headers-5.4.0-1062-azure, p-cpe:/a:canonical:ubuntu_linux:linux-headers-aws, p-cpe:/a:canonical:ubuntu_linux:linux-headers-aws-edge, p-cpe:/a:canonical:ubuntu_linux:linux-headers-aws-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-headers-azure, p-cpe:/a:canonical:ubuntu_linux:linux-headers-azure-edge, p-cpe:/a:canonical:ubuntu_linux:linux-headers-azure-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-headers-gke, p-cpe:/a:canonical:ubuntu_linux:linux-headers-gke-5.4, p-cpe:/a:canonical:ubuntu_linux:linux-headers-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-headers-gkeop-5.4, p-cpe:/a:canonical:ubuntu_linux:linux-headers-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-headers-oracle-edge, p-cpe:/a:canonical:ubuntu_linux:linux-headers-oracle-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-headers-raspi, p-cpe:/a:canonical:ubuntu_linux:linux-headers-raspi-hwe-18.04, p-cpe:/a:canonical:ubuntu_linux:linux-headers-raspi-hwe-18.04-edge, p-cpe:/a:canonical:ubuntu_linux:linux-headers-raspi2, p-cpe:/a:canonical:ubuntu_linux:linux-headers-raspi2-hwe-18.04, p-cpe:/a:canonical:ubuntu_linux:linux-headers-raspi2-hwe-18.04-edge, p-cpe:/a:canonical:ubuntu_linux:linux-image-5.4.0-1025-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-image-5.4.0-1045-raspi, p-cpe:/a:canonical:ubuntu_linux:linux-image-5.4.0-1054-gke, p-cpe:/a:canonical:ubuntu_linux:linux-image-5.4.0-1056-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-image-5.4.0-1058-aws, p-cpe:/a:canonical:ubuntu_linux:linux-image-5.4.0-1062-azure, p-cpe:/a:canonical:ubuntu_linux:linux-image-aws, p-cpe:/a:canonical:ubuntu_linux:linux-image-aws-edge, p-cpe:/a:canonical:ubuntu_linux:linux-image-aws-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-image-azure, p-cpe:/a:canonical:ubuntu_linux:linux-image-azure-edge, p-cpe:/a:canonical:ubuntu_linux:linux-image-azure-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-image-gke, p-cpe:/a:canonical:ubuntu_linux:linux-image-gke-5.4, p-cpe:/a:canonical:ubuntu_linux:linux-image-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-image-gkeop-5.4, p-cpe:/a:canonical:ubuntu_linux:linux-image-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-image-oracle-edge, p-cpe:/a:canonical:ubuntu_linux:linux-image-oracle-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-image-raspi, p-cpe:/a:canonical:ubuntu_linux:linux-image-raspi-hwe-18.04, p-cpe:/a:canonical:ubuntu_linux:linux-image-raspi-hwe-18.04-edge, p-cpe:/a:canonical:ubuntu_linux:linux-image-raspi2, p-cpe:/a:canonical:ubuntu_linux:linux-image-raspi2-hwe-18.04, p-cpe:/a:canonical:ubuntu_linux:linux-image-raspi2-hwe-18.04-edge, p-cpe:/a:canonical:ubuntu_linux:linux-image-unsigned-5.4.0-1025-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-image-unsigned-5.4.0-1054-gke, p-cpe:/a:canonical:ubuntu_linux:linux-image-unsigned-5.4.0-1056-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-image-unsigned-5.4.0-1062-azure, p-cpe:/a:canonical:ubuntu_linux:linux-modules-5.4.0-1025-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-modules-5.4.0-1045-raspi, p-cpe:/a:canonical:ubuntu_linux:linux-modules-5.4.0-1054-gke, p-cpe:/a:canonical:ubuntu_linux:linux-modules-5.4.0-1056-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-modules-5.4.0-1058-aws, p-cpe:/a:canonical:ubuntu_linux:linux-modules-5.4.0-1062-azure, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-5.4.0-1025-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-5.4.0-1054-gke, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-5.4.0-1056-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-5.4.0-1058-aws, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-5.4.0-1062-azure, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-aws, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-aws-edge, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-aws-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-azure, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-azure-edge, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-azure-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-gke, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-gke-5.4, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-gkeop-5.4, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-modules-extra-oracle-edge, p-cpe:/a:canonical:ubuntu_linux:linux-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-oracle-5.4-headers-5.4.0-1056, p-cpe:/a:canonical:ubuntu_linux:linux-oracle-5.4-tools-5.4.0-1056, p-cpe:/a:canonical:ubuntu_linux:linux-oracle-edge, p-cpe:/a:canonical:ubuntu_linux:linux-oracle-headers-5.4.0-1056, p-cpe:/a:canonical:ubuntu_linux:linux-oracle-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-oracle-tools-5.4.0-1056, p-cpe:/a:canonical:ubuntu_linux:linux-raspi, p-cpe:/a:canonical:ubuntu_linux:linux-raspi-5.4-headers-5.4.0-1045, p-cpe:/a:canonical:ubuntu_linux:linux-raspi-5.4-tools-5.4.0-1045, p-cpe:/a:canonical:ubuntu_linux:linux-raspi-headers-5.4.0-1045, p-cpe:/a:canonical:ubuntu_linux:linux-raspi-hwe-18.04, p-cpe:/a:canonical:ubuntu_linux:linux-raspi-hwe-18.04-edge, p-cpe:/a:canonical:ubuntu_linux:linux-raspi-tools-5.4.0-1045, p-cpe:/a:canonical:ubuntu_linux:linux-raspi2, p-cpe:/a:canonical:ubuntu_linux:linux-raspi2-hwe-18.04, p-cpe:/a:canonical:ubuntu_linux:linux-raspi2-hwe-18.04-edge, p-cpe:/a:canonical:ubuntu_linux:linux-signed-azure, p-cpe:/a:canonical:ubuntu_linux:linux-signed-azure-edge, p-cpe:/a:canonical:ubuntu_linux:linux-signed-image-azure, p-cpe:/a:canonical:ubuntu_linux:linux-signed-image-azure-edge, p-cpe:/a:canonical:ubuntu_linux:linux-signed-image-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-signed-image-oracle-edge, p-cpe:/a:canonical:ubuntu_linux:linux-signed-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-signed-oracle-edge, p-cpe:/a:canonical:ubuntu_linux:linux-tools-5.4.0-1025-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-tools-5.4.0-1045-raspi, p-cpe:/a:canonical:ubuntu_linux:linux-tools-5.4.0-1054-gke, p-cpe:/a:canonical:ubuntu_linux:linux-tools-5.4.0-1056-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-tools-5.4.0-1058-aws, p-cpe:/a:canonical:ubuntu_linux:linux-tools-5.4.0-1062-azure, p-cpe:/a:canonical:ubuntu_linux:linux-tools-aws, p-cpe:/a:canonical:ubuntu_linux:linux-tools-aws-edge, p-cpe:/a:canonical:ubuntu_linux:linux-tools-aws-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-tools-azure, p-cpe:/a:canonical:ubuntu_linux:linux-tools-azure-edge, p-cpe:/a:canonical:ubuntu_linux:linux-tools-azure-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-tools-gke, p-cpe:/a:canonical:ubuntu_linux:linux-tools-gke-5.4, p-cpe:/a:canonical:ubuntu_linux:linux-tools-gkeop, p-cpe:/a:canonical:ubuntu_linux:linux-tools-gkeop-5.4, p-cpe:/a:canonical:ubuntu_linux:linux-tools-oracle, p-cpe:/a:canonical:ubuntu_linux:linux-tools-oracle-edge, p-cpe:/a:canonical:ubuntu_linux:linux-tools-oracle-lts-20.04, p-cpe:/a:canonical:ubuntu_linux:linux-tools-raspi, p-cpe:/a:canonical:ubuntu_linux:linux-tools-raspi-hwe-18.04, p-cpe:/a:canonical:ubuntu_linux:linux-tools-raspi-hwe-18.04-edge, p-cpe:/a:canonical:ubuntu_linux:linux-tools-raspi2, p-cpe:/a:canonical:ubuntu_linux:linux-tools-raspi2-hwe-18.04, p-cpe:/a:canonical:ubuntu_linux:linux-tools-raspi2-hwe-18.04-edge

Required KB Items: Host/cpu, Host/Ubuntu, Host/Ubuntu/release, Host/Debian/dpkg-l

Exploit Ease: No known exploits are available

Patch Publication Date: 10/22/2021

Vulnerability Publication Date: 9/8/2020

Reference Information

CVE: CVE-2020-3702, CVE-2021-3732, CVE-2021-38198, CVE-2021-38205, CVE-2021-40490, CVE-2021-42008

USN: 5116-2