--- title: 'USN-5208-1: Linux kernel vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-5208-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-5208-1 --- # USN-5208-1: Linux kernel vulnerabilities Publication date 6 January 2022 Overview Several security issues were fixed in the Linux kernel. Releases [21.10](https://ubuntu.com/security/notices?release=impish) [21.04](https://ubuntu.com/security/notices?release=hirsute) [20.04 LTS](https://ubuntu.com/security/notices?release=focal) --- Open side navigation ## Packages * [linux](https://ubuntu.com/security/cves?package=linux) - Linux kernel * [linux-aws](https://ubuntu.com/security/cves?package=linux-aws) - Linux kernel for Amazon Web Services (AWS) systems * [linux-aws-5.11](https://ubuntu.com/security/cves?package=linux-aws-5.11) - Linux kernel for Amazon Web Services (AWS) systems * [linux-azure](https://ubuntu.com/security/cves?package=linux-azure) - Linux kernel for Microsoft Azure Cloud systems * [linux-azure-5.11](https://ubuntu.com/security/cves?package=linux-azure-5.11) - Linux kernel for Microsoft Azure cloud systems * [linux-gcp](https://ubuntu.com/security/cves?package=linux-gcp) - Linux kernel for Google Cloud Platform (GCP) systems * [linux-gcp-5.11](https://ubuntu.com/security/cves?package=linux-gcp-5.11) - Linux kernel for Google Cloud Platform (GCP) systems * [linux-hwe-5.11](https://ubuntu.com/security/cves?package=linux-hwe-5.11) - Linux hardware enablement (HWE) kernel * [linux-kvm](https://ubuntu.com/security/cves?package=linux-kvm) - Linux kernel for cloud environments * [linux-oracle](https://ubuntu.com/security/cves?package=linux-oracle) - Linux kernel for Oracle Cloud systems * [linux-oracle-5.11](https://ubuntu.com/security/cves?package=linux-oracle-5.11) - Linux kernel for Oracle Cloud systems * [linux-raspi](https://ubuntu.com/security/cves?package=linux-raspi) - Linux kernel for Raspberry Pi systems ## Details Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. ([CVE-2021-4002](https://ubuntu.com/security/CVE-2021-4002)) It was discovered that a race condition existed in the overlay file system implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). ([CVE-2021-20321](https://ubuntu.com/security/CVE-2021-20321)) It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface (NCI) implementation. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. ([CVE-2021-3760](https://ubuntu.com/security/CVE-2021-3760)) It was discovered that an integer overflow could be triggered in the eBPF implementation in... --- Show more ## Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 21.10 impish | [linux-image-aws](https://launchpad.net/ubuntu/+source/linux-meta-aws) –  [5.13.0.1008.10](https://launchpad.net/ubuntu/+source/linux-meta-aws/5.13.0.1008.10) | | | | [linux-image-virtual](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.13.0.23.34](https://launchpad.net/ubuntu/+source/linux-meta/5.13.0.23.34) | | | | [linux-image-generic-64k](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.13.0.23.34](https://launchpad.net/ubuntu/+source/linux-meta/5.13.0.23.34) | | | | [linux-image-generic](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.13.0.23.34](https://launchpad.net/ubuntu/+source/linux-meta/5.13.0.23.34) | | | | [linux-image-5.13.0-23-generic-lpae](https://launchpad.net/ubuntu/+source/linux) –  [5.13.0-23.23](https://launchpad.net/ubuntu/+source/linux/5.13.0-23.23) | | | | [linux-image-5.13.0-1008-aws](https://launchpad.net/ubuntu/+source/linux-aws) –  [5.13.0-1008.9](https://launchpad.net/ubuntu/+source/linux-aws/5.13.0-1008.9) | | | | [linux-image-5.13.0-23-generic](https://launchpad.net/ubuntu/+source/linux-signed) –  [5.13.0-23.23](https://launchpad.net/ubuntu/+source/linux-signed/5.13.0-23.23) | | | | [linux-image-5.13.0-1008-gcp](https://launchpad.net/ubuntu/+source/linux-signed-gcp) –  [5.13.0-1008.9](https://launchpad.net/ubuntu/+source/linux-signed-gcp/5.13.0-1008.9) | | | | [linux-image-azure](https://launchpad.net/ubuntu/+source/linux-meta-azure) –  [5.13.0.1009.10](https://launchpad.net/ubuntu/+source/linux-meta-azure/5.13.0.1009.10) | | | | [linux-image-5.13.0-1011-oracle](https://launchpad.net/ubuntu/+source/linux-signed-oracle) –  [5.13.0-1011.13](https://launchpad.net/ubuntu/+source/linux-signed-oracle/5.13.0-1011.13) | | | | [linux-image-raspi-nolpae](https://launchpad.net/ubuntu/+source/linux-meta-raspi) –  [5.13.0.1012.18](https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.13.0.1012.18) | | | | [linux-image-oem-20.04](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.13.0.23.34](https://launchpad.net/ubuntu/+source/linux-meta/5.13.0.23.34) | | | | [linux-image-5.13.0-23-lowlatency](https://launchpad.net/ubuntu/+source/linux-signed) –  [5.13.0-23.23](https://launchpad.net/ubuntu/+source/linux-signed/5.13.0-23.23) | | | | [linux-image-kvm](https://launchpad.net/ubuntu/+source/linux-meta-kvm) –  [5.13.0.1007.7](https://launchpad.net/ubuntu/+source/linux-meta-kvm/5.13.0.1007.7) | | | | [linux-image-gcp](https://launchpad.net/ubuntu/+source/linux-meta-gcp) –  [5.13.0.1008.9](https://launchpad.net/ubuntu/+source/linux-meta-gcp/5.13.0.1008.9) | | | | [linux-image-5.13.0-1012-raspi-nolpae](https://launchpad.net/ubuntu/+source/linux-raspi) –  [5.13.0-1012.14](https://launchpad.net/ubuntu/+source/linux-raspi/5.13.0-1012.14) | | | | [linux-image-oracle](https://launchpad.net/ubuntu/+source/linux-meta-oracle) –  [5.13.0.1011.13](https://launchpad.net/ubuntu/+source/linux-meta-oracle/5.13.0.1011.13) | | | | [linux-image-raspi](https://launchpad.net/ubuntu/+source/linux-meta-raspi) –  [5.13.0.1012.18](https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.13.0.1012.18) | | | | [linux-image-5.13.0-23-generic-64k](https://launchpad.net/ubuntu/+source/linux-signed) –  [5.13.0-23.23](https://launchpad.net/ubuntu/+source/linux-signed/5.13.0-23.23) | | | | [linux-image-gke](https://launchpad.net/ubuntu/+source/linux-meta-gcp) –  [5.13.0.1008.9](https://launchpad.net/ubuntu/+source/linux-meta-gcp/5.13.0.1008.9) | | | | [linux-image-5.13.0-1009-azure](https://launchpad.net/ubuntu/+source/linux-signed-azure) –  [5.13.0-1009.10](https://launchpad.net/ubuntu/+source/linux-signed-azure/5.13.0-1009.10) | | | | [linux-image-generic-lpae](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.13.0.23.34](https://launchpad.net/ubuntu/+source/linux-meta/5.13.0.23.34) | | | | [linux-image-5.13.0-1007-kvm](https://launchpad.net/ubuntu/+source/linux-signed-kvm) –  [5.13.0-1007.7](https://launchpad.net/ubuntu/+source/linux-signed-kvm/5.13.0-1007.7) | | | | [linux-image-lowlatency](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.13.0.23.34](https://launchpad.net/ubuntu/+source/linux-meta/5.13.0.23.34) | | | | [linux-image-5.13.0-1012-raspi](https://launchpad.net/ubuntu/+source/linux-raspi) –  [5.13.0-1012.14](https://launchpad.net/ubuntu/+source/linux-raspi/5.13.0-1012.14) | | | | 21.04 hirsute | [linux-image-virtual](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.11.0.44.44](https://launchpad.net/ubuntu/+source/linux-meta/5.11.0.44.44) | | | | [linux-image-5.11.0-1024-raspi](https://launchpad.net/ubuntu/+source/linux-raspi) –  [5.11.0-1024.26](https://launchpad.net/ubuntu/+source/linux-raspi/5.11.0-1024.26) | | | | [linux-image-generic-64k](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.11.0.44.44](https://launchpad.net/ubuntu/+source/linux-meta/5.11.0.44.44) | | | | [linux-image-5.11.0-1024-gcp](https://launchpad.net/ubuntu/+source/linux-signed-gcp) –  [5.11.0-1024.26](https://launchpad.net/ubuntu/+source/linux-signed-gcp/5.11.0-1024.26) | | | | [linux-image-aws](https://launchpad.net/ubuntu/+source/linux-meta-aws) –  [5.11.0.1023.24](https://launchpad.net/ubuntu/+source/linux-meta-aws/5.11.0.1023.24) | | | | [linux-image-5.11.0-1023-oracle](https://launchpad.net/ubuntu/+source/linux-signed-oracle) –  [5.11.0-1023.24](https://launchpad.net/ubuntu/+source/linux-signed-oracle/5.11.0-1023.24) | | | | [linux-image-5.11.0-1024-raspi-nolpae](https://launchpad.net/ubuntu/+source/linux-raspi) –  [5.11.0-1024.26](https://launchpad.net/ubuntu/+source/linux-raspi/5.11.0-1024.26) | | | | [linux-image-5.11.0-44-generic-64k](https://launchpad.net/ubuntu/+source/linux-signed) –  [5.11.0-44.48](https://launchpad.net/ubuntu/+source/linux-signed/5.11.0-44.48) | | | | [linux-image-5.11.0-1023-azure](https://launchpad.net/ubuntu/+source/linux-signed-azure) –  [5.11.0-1023.24](https://launchpad.net/ubuntu/+source/linux-signed-azure/5.11.0-1023.24) | | | | [linux-image-5.11.0-44-lowlatency](https://launchpad.net/ubuntu/+source/linux-signed) –  [5.11.0-44.48](https://launchpad.net/ubuntu/+source/linux-signed/5.11.0-44.48) | | | | [linux-image-azure](https://launchpad.net/ubuntu/+source/linux-meta-azure) –  [5.11.0.1023.24](https://launchpad.net/ubuntu/+source/linux-meta-azure/5.11.0.1023.24) | | | | [linux-image-raspi-nolpae](https://launchpad.net/ubuntu/+source/linux-meta-raspi) –  [5.11.0.1024.22](https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.11.0.1024.22) | | | | [linux-image-oem-20.04](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.11.0.44.44](https://launchpad.net/ubuntu/+source/linux-meta/5.11.0.44.44) | | | | [linux-image-5.11.0-1023-aws](https://launchpad.net/ubuntu/+source/linux-aws) –  [5.11.0-1023.24](https://launchpad.net/ubuntu/+source/linux-aws/5.11.0-1023.24) | | | | [linux-image-5.11.0-44-generic-lpae](https://launchpad.net/ubuntu/+source/linux) –  [5.11.0-44.48](https://launchpad.net/ubuntu/+source/linux/5.11.0-44.48) | | | | [linux-image-gke](https://launchpad.net/ubuntu/+source/linux-meta-gcp) –  [5.11.0.1024.24](https://launchpad.net/ubuntu/+source/linux-meta-gcp/5.11.0.1024.24) | | | | [linux-image-5.11.0-1021-kvm](https://launchpad.net/ubuntu/+source/linux-signed-kvm) –  [5.11.0-1021.23](https://launchpad.net/ubuntu/+source/linux-signed-kvm/5.11.0-1021.23) | | | | [linux-image-gcp](https://launchpad.net/ubuntu/+source/linux-meta-gcp) –  [5.11.0.1024.24](https://launchpad.net/ubuntu/+source/linux-meta-gcp/5.11.0.1024.24) | | | | [linux-image-5.11.0-44-generic](https://launchpad.net/ubuntu/+source/linux-signed) –  [5.11.0-44.48](https://launchpad.net/ubuntu/+source/linux-signed/5.11.0-44.48) | | | | [linux-image-oracle](https://launchpad.net/ubuntu/+source/linux-meta-oracle) –  [5.11.0.1023.24](https://launchpad.net/ubuntu/+source/linux-meta-oracle/5.11.0.1023.24) | | | | [linux-image-generic](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.11.0.44.44](https://launchpad.net/ubuntu/+source/linux-meta/5.11.0.44.44) | | | | [linux-image-raspi](https://launchpad.net/ubuntu/+source/linux-meta-raspi) –  [5.11.0.1024.22](https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.11.0.1024.22) | | | | [linux-image-kvm](https://launchpad.net/ubuntu/+source/linux-meta-kvm) –  [5.11.0.1021.22](https://launchpad.net/ubuntu/+source/linux-meta-kvm/5.11.0.1021.22) | | | | [linux-image-generic-lpae](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.11.0.44.44](https://launchpad.net/ubuntu/+source/linux-meta/5.11.0.44.44) | | | | [linux-image-lowlatency](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.11.0.44.44](https://launchpad.net/ubuntu/+source/linux-meta/5.11.0.44.44) | | | | 20.04 LTS focal | [linux-image-5.11.0-1023-aws](https://launchpad.net/ubuntu/+source/linux-aws-5.11) –  [5.11.0-1023.24~20.04.1](https://launchpad.net/ubuntu/+source/linux-aws-5.11/5.11.0-1023.24~20.04.1) | | | | [linux-image-5.11.0-1024-gcp](https://launchpad.net/ubuntu/+source/linux-signed-gcp-5.11) –  [5.11.0-1024.26~20.04.1](https://launchpad.net/ubuntu/+source/linux-signed-gcp-5.11/5.11.0-1024.26~20.04.1) | | | | [linux-image-aws](https://launchpad.net/ubuntu/+source/linux-meta-aws-5.11) –  [5.11.0.1023.24~20.04.23](https://launchpad.net/ubuntu/+source/linux-meta-aws-5.11/5.11.0.1023.24~20.04.23) | | | | [linux-image-lowlatency-hwe-20.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.11) –  [5.11.0.44.48~20.04.22](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.11/5.11.0.44.48~20.04.22) | | | | [linux-image-5.11.0-1023-oracle](https://launchpad.net/ubuntu/+source/linux-signed-oracle-5.11) –  [5.11.0-1023.24~20.04.1](https://launchpad.net/ubuntu/+source/linux-signed-oracle-5.11/5.11.0-1023.24~20.04.1) | | | | [linux-image-5.11.0-44-generic-64k](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.11) –  [5.11.0-44.48~20.04.2](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.11/5.11.0-44.48~20.04.2) | | | | [linux-image-5.11.0-1023-azure](https://launchpad.net/ubuntu/+source/linux-signed-azure-5.11) –  [5.11.0-1023.24~20.04.1](https://launchpad.net/ubuntu/+source/linux-signed-azure-5.11/5.11.0-1023.24~20.04.1) | | | | [linux-image-generic-hwe-20.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.11) –  [5.11.0.44.48~20.04.22](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.11/5.11.0.44.48~20.04.22) | | | | [linux-image-azure](https://launchpad.net/ubuntu/+source/linux-meta-azure-5.11) –  [5.11.0.1023.24~20.04.23](https://launchpad.net/ubuntu/+source/linux-meta-azure-5.11/5.11.0.1023.24~20.04.23) | | | | [linux-image-5.11.0-44-generic-lpae](https://launchpad.net/ubuntu/+source/linux-hwe-5.11) –  [5.11.0-44.48~20.04.2](https://launchpad.net/ubuntu/+source/linux-hwe-5.11/5.11.0-44.48~20.04.2) | | | | [linux-image-5.11.0-44-lowlatency](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.11) –  [5.11.0-44.48~20.04.2](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.11/5.11.0-44.48~20.04.2) | | | | [linux-image-gcp](https://launchpad.net/ubuntu/+source/linux-meta-gcp-5.11) –  [5.11.0.1024.26~20.04.24](https://launchpad.net/ubuntu/+source/linux-meta-gcp-5.11/5.11.0.1024.26~20.04.24) | | | | [linux-image-virtual-hwe-20.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.11) –  [5.11.0.44.48~20.04.22](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.11/5.11.0.44.48~20.04.22) | | | | [linux-image-oracle](https://launchpad.net/ubuntu/+source/linux-meta-oracle-5.11) –  [5.11.0.1023.24~20.04.16](https://launchpad.net/ubuntu/+source/linux-meta-oracle-5.11/5.11.0.1023.24~20.04.16) | | | | [linux-image-5.11.0-44-generic](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.11) –  [5.11.0-44.48~20.04.2](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.11/5.11.0-44.48~20.04.2) | | | | [linux-image-generic-lpae-hwe-20.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.11) –  [5.11.0.44.48~20.04.22](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.11/5.11.0.44.48~20.04.22) | | | | [linux-image-generic-64k-hwe-20.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.11) –  [5.11.0.44.48~20.04.22](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.11/5.11.0.44.48~20.04.22) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References * [CVE-2021-43389](https://ubuntu.com/security/CVE-2021-43389) * [CVE-2021-43267](https://ubuntu.com/security/CVE-2021-43267) * [CVE-2021-43056](https://ubuntu.com/security/CVE-2021-43056) * [CVE-2021-41864](https://ubuntu.com/security/CVE-2021-41864) * [CVE-2021-4002](https://ubuntu.com/security/CVE-2021-4002) * [CVE-2021-3760](https://ubuntu.com/security/CVE-2021-3760) * [CVE-2021-20321](https://ubuntu.com/security/CVE-2021-20321) ## Related notices * [USN-6221-1](https://ubuntu.com/security/notices/USN-6221-1) * [USN-5513-1](https://ubuntu.com/security/notices/USN-5513-1) * [USN-5505-1](https://ubuntu.com/security/notices/USN-5505-1) * [USN-5343-1](https://ubuntu.com/security/notices/USN-5343-1) * [USN-5218-1](https://ubuntu.com/security/notices/USN-5218-1) * [USN-5211-1](https://ubuntu.com/security/notices/USN-5211-1) * [USN-5210-1](https://ubuntu.com/security/notices/USN-5210-1) * [USN-5209-1](https://ubuntu.com/security/notices/USN-5209-1) * [USN-5207-1](https://ubuntu.com/security/notices/USN-5207-1) * [USN-5206-1](https://ubuntu.com/security/notices/USN-5206-1) --- Show 4 more references --- Have additional questions? [Talk to a member of the team ›](https://wiki.ubuntu.com/SecurityTeam/FAQ?_ga=2.242131138.1744859116.1742138161-1500419473.1726851136&_gl=1*161muja*_gcl_au*MzUyMTIzNjI1LjE3MzYyNDQ4NTE.#Contact)