Your submission was sent successfully! Close

USN-5217-1: Linux kernel (OEM) vulnerabilities

11 January 2022

Several security issues were fixed in the Linux kernel.

Releases

Packages

Details

It was discovered that the NFS server implementation in the Linux kernel
contained an out-of-bounds write vulnerability. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2021-4090)

It was discovered that the eBPF implementation in the Linux kernel did
not properly validate the memory size of certain ring buffer operation
arguments. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2021-4204)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.04

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

Related notices

  • USN-5219-1: linux-aws-5.11-tools-5.11.0-1025, linux-modules-extra-5.11.0-1025-azure, linux-modules-extra-5.13.0-1010-gcp, linux-image-unsigned-5.11.0-46-generic, linux-modules-5.11.0-1026-gcp, linux-hwe-5.11-headers-5.11.0-46, linux-kvm, linux-image-extra-virtual-hwe-20.04-edge, linux-source, linux-raspi-headers-5.11.0-1025, linux-oem-20.04-edge, linux-cloud-tools-5.13.0-1010-azure, linux-image-virtual, linux-image-generic, linux-generic-lpae-hwe-20.04, linux-image-unsigned-5.13.0-1010-azure, linux-headers-5.13.0-1008-kvm, linux-image-unsigned-5.11.0-1022-kvm, linux-tools-oem-20.04-edge, linux-headers-virtual-hwe-20.04-edge, linux-azure-headers-5.13.0-1010, linux-image-unsigned-5.13.0-1013-oracle, linux-cloud-tools-azure, linux-virtual-hwe-20.04, linux-hwe-5.11-tools-host, linux-tools-5.11.0-1025-raspi, linux-virtual, linux-cloud-tools-generic-hwe-20.04, linux-tools-lowlatency, linux-aws-headers-5.13.0-1009, linux-image-unsigned-5.11.0-1026-gcp, linux-tools-virtual, linux-modules-5.13.0-1013-raspi, linux-oem-5.10-headers-5.10.0-1055, linux-cloud-tools-common, linux-image-unsigned-5.13.0-25-lowlatency, linux-headers-5.11.0-1025-azure, linux-tools-5.11.0-46, linux-headers-5.13.0-25, linux-modules-extra-5.13.0-1010-azure, linux-headers-5.13.0-25-generic-64k, linux-modules-5.13.0-25-generic, linux-kvm-headers-5.11.0-1022, linux-headers-generic-hwe-20.04-edge, linux-headers-generic-64k, linux-image-5.11.0-1022-kvm, linux-oracle-tools-5.13.0-1013, linux-image-unsigned-5.13.0-1008-kvm, linux-tools-5.11.0-1026-gcp, linux-tools-generic-lpae-hwe-20.04-edge, linux-headers-lowlatency-hwe-20.04, linux-oem-20.04b, linux-headers-5.13.0-25-lowlatency, linux-image-extra-virtual-hwe-20.04, linux-gcp-5.11, linux-headers-kvm, linux-modules-5.11.0-1025-aws, linux-tools-5.13.0-1008-kvm, linux-image-5.13.0-1013-raspi, linux-headers-generic-hwe-20.04, linux-image-5.11.0-46-generic, linux-gcp-headers-5.11.0-1026, linux-image-unsigned-5.11.0-46-generic-64k, linux-azure, linux-hwe-5.11-source-5.11.0, linux-tools-raspi, linux-headers-aws, linux-tools-azure, linux-raspi-tools-5.13.0-1013, linux-modules-extra-raspi, linux-modules-5.11.0-1025-raspi-nolpae, linux-modules-5.13.0-1013-oracle, linux-headers-5.10.0-1055-oem, linux-headers-virtual-hwe-20.04, linux-source-5.11.0, linux-buildinfo-5.11.0-46-generic-lpae, linux-modules-5.11.0-1022-kvm, linux-headers-oem-20.04-edge, linux-image-oem-20.04b, linux-modules-5.11.0-46-generic-64k, linux-modules-extra-azure, linux-raspi-headers-5.13.0-1013, linux-tools-generic-lpae, linux-image-5.13.0-1009-aws, linux-tools-aws, linux-modules-extra-5.13.0-1013-oracle, linux-azure-5.11, linux-headers-gke, linux-tools-virtual-hwe-20.04-edge, linux-buildinfo-5.11.0-46-lowlatency, linux-modules-extra-gcp, linux-oracle-tools-5.11.0-1025, linux-tools-oem-20.04b, linux-tools-5.13.0-1009-aws, linux-image-5.13.0-25-lowlatency, linux-headers-generic, linux-oem-20.04, linux-image-raspi-nolpae, linux-image-unsigned-5.13.0-25-generic-64k, linux-tools-5.11.0-1025-aws, linux-oracle-5.11-headers-5.11.0-1025, linux-modules-extra-5.13.0-1013-raspi-nolpae, linux-oem-5.10, linux-image-5.11.0-1025-aws, linux-buildinfo-5.11.0-1025-aws, linux-tools-5.13.0-1013-raspi, linux-tools-oracle, linux-image-5.13.0-25-generic, linux-image-oracle, linux-modules-5.11.0-1025-oracle, linux-virtual-hwe-20.04-edge, linux-tools-5.11.0-1025-azure, linux-image-gke, linux-headers-5.11.0-1025-raspi, linux-tools-generic, linux-headers-generic-lpae-hwe-20.04, linux-image-5.13.0-1013-raspi-nolpae, linux-lowlatency-hwe-20.04, linux-kvm-tools-5.11.0-1022, linux-generic-64k-hwe-20.04-edge, linux-headers-oem-20.04b, linux-generic-lpae, linux-image-generic-lpae-hwe-20.04-edge, linux-image-5.11.0-46-lowlatency, linux-tools-generic-hwe-20.04, linux-image-extra-virtual, linux-buildinfo-5.13.0-25-generic, linux-tools-gke, linux-cloud-tools-virtual-hwe-20.04-edge, linux-aws, linux-oem-5.10-tools-5.10.0-1055, linux-azure-cloud-tools-5.11.0-1025, linux-azure-5.11-cloud-tools-5.11.0-1025, linux-azure-5.11-headers-5.11.0-1025, linux-buildinfo-5.13.0-1013-oracle, linux-aws-cloud-tools-5.13.0-1009, linux-cloud-tools-5.13.0-25-lowlatency, linux-image-5.13.0-25-generic-64k, linux-cloud-tools-5.13.0-25, linux-modules-5.11.0-1025-raspi, linux-tools-gcp, linux-buildinfo-5.13.0-1010-azure, linux-tools-5.13.0-1010-azure, linux-headers-5.11.0-1025-oracle, linux-image-generic-hwe-20.04, linux-headers-oem-20.04, linux-libc-dev, linux-buildinfo-5.11.0-46-generic, linux-modules-extra-5.11.0-1026-gcp, linux-oracle-5.11-tools-5.11.0-1025, linux-raspi-nolpae, linux-image-aws, linux-image-generic-64k-hwe-20.04, linux-tools-5.13.0-25-generic-64k, linux-buildinfo-5.13.0-1009-aws, linux-crashdump, linux-aws-cloud-tools-5.11.0-1025, linux-tools-5.13.0-25-generic, linux-buildinfo-5.13.0-25-generic-lpae, linux-image-5.13.0-1013-oracle, linux-modules-5.13.0-1010-gcp, linux-cloud-tools-virtual-hwe-20.04, linux-cloud-tools-5.11.0-1025-aws, linux-hwe-5.11-cloud-tools-5.11.0-46, linux-cloud-tools-5.13.0-1009-aws, linux-image-lowlatency, linux-buildinfo-5.11.0-1025-oracle, linux-headers-5.11.0-1025-aws, linux-tools-5.11.0-1025-raspi-nolpae, linux-cloud-tools-lowlatency, linux-modules-extra-gke, linux-headers-5.11.0-46, linux-image-generic-hwe-20.04-edge, linux-image-lowlatency-hwe-20.04, linux-image-5.11.0-1025-raspi, linux-source-5.13.0, linux-headers-lowlatency-hwe-20.04-edge, linux-generic-64k-hwe-20.04, linux-cloud-tools-lowlatency-hwe-20.04, linux-oracle-5.11, linux-tools-5.13.0-25, linux-headers-5.11.0-1026-gcp, linux-image-generic-lpae-hwe-20.04, linux-image-lowlatency-hwe-20.04-edge, linux-aws-5.11-cloud-tools-5.11.0-1025, linux-headers-5.13.0-1010-gcp, linux-image-virtual-hwe-20.04-edge, linux-image-5.11.0-46-generic-lpae, linux-image-oem-20.04-edge, linux-modules-extra-aws, linux-tools-5.11.0-46-generic-64k, linux-raspi-tools-5.11.0-1025, linux-image-5.11.0-1025-oracle, linux-headers-5.13.0-1010-azure, linux-headers-gcp, linux-modules-5.13.0-1009-aws, linux-headers-generic-lpae-hwe-20.04-edge, linux-headers-5.11.0-46-lowlatency, linux-raspi, linux-headers-virtual, linux-azure-5.11-tools-5.11.0-1025, linux-hwe-5.11-tools-5.11.0-46, linux-tools-host, linux-image-virtual-hwe-20.04, linux-aws-5.11, linux-buildinfo-5.13.0-1013-raspi-nolpae, linux-headers-5.11.0-46-generic, linux-image-unsigned-5.13.0-1010-gcp, linux-modules-extra-raspi-nolpae, linux-headers-5.13.0-1013-raspi-nolpae, linux-headers-5.11.0-1022-kvm, linux-headers-generic-lpae, linux-tools-5.11.0-1022-kvm, linux-image-5.10.0-1055-oem, linux-headers-5.13.0-1009-aws, linux-tools-generic-64k-hwe-20.04, linux-cloud-tools-5.11.0-1025-azure, linux-tools-generic-hwe-20.04-edge, linux-headers-azure, linux-gcp-tools-5.13.0-1010, linux-buildinfo-5.11.0-46-generic-64k, linux-headers-oracle, linux-image-generic-64k-hwe-20.04-edge, linux-headers-5.11.0-1025-raspi-nolpae, linux-headers-5.13.0-1013-oracle, linux-image-5.11.0-46-generic-64k, linux-oracle-headers-5.13.0-1013, linux-tools-5.11.0-1025-oracle, linux-buildinfo-5.11.0-1025-azure, linux-headers-lowlatency, linux-image-unsigned-5.11.0-46-lowlatency, linux-image-5.13.0-1008-kvm, linux-tools-common, linux-tools-5.13.0-25-lowlatency, linux-image-kvm, linux-aws-headers-5.11.0-1025, linux-gcp, linux-cloud-tools-generic-hwe-20.04-edge, linux-image-5.11.0-1026-gcp, linux-cloud-tools-5.13.0-25-generic, linux-headers-5.13.0-25-generic, linux-tools-5.13.0-1013-oracle, linux-hwe-5.11-tools-common, linux-azure-tools-5.13.0-1010, linux-cloud-tools-5.11.0-46, linux-azure-tools-5.11.0-1025, linux-modules-5.13.0-25-generic-64k, linux-tools-generic-64k, linux-tools-5.13.0-1013-raspi-nolpae, linux-image-azure, linux-modules-5.11.0-1025-azure, linux-image-5.13.0-1010-gcp, linux-oracle-headers-5.11.0-1025, linux-generic, linux-kvm-tools-5.13.0-1008, linux-tools-lowlatency-hwe-20.04, linux-image-gcp, linux-headers-generic-64k-hwe-20.04, linux-lowlatency, linux-kvm-headers-5.13.0-1008, linux-modules-5.13.0-1013-raspi-nolpae, linux-buildinfo-5.11.0-1022-kvm, linux-tools-generic-64k-hwe-20.04-edge, linux-modules-extra-5.11.0-1025-oracle, linux-headers-5.13.0-25-generic-lpae, linux-tools-raspi-nolpae, linux-headers-5.13.0-1013-raspi, linux-image-unsigned-5.11.0-1025-azure, linux-gcp-headers-5.13.0-1010, linux-aws-tools-5.13.0-1009, linux-modules-5.13.0-1008-kvm, linux-buildinfo-5.13.0-1010-gcp, linux-generic-64k, linux-modules-5.11.0-46-generic-lpae, linux-aws-5.11-headers-5.11.0-1025, linux-tools-5.11.0-46-lowlatency, linux-modules-5.11.0-46-lowlatency, linux-gcp-5.11-headers-5.11.0-1026, linux-azure-cloud-tools-5.13.0-1010, linux-tools-5.11.0-46-generic, linux-generic-hwe-20.04-edge, linux-image-oem-20.04, linux-cloud-tools-lowlatency-hwe-20.04-edge, linux-headers-5.11.0-46-generic-lpae, linux-aws-tools-5.11.0-1025, linux-buildinfo-5.11.0-1025-raspi, linux-gke, linux-lowlatency-hwe-20.04-edge, linux-modules-5.13.0-25-lowlatency, linux-buildinfo-5.13.0-1008-kvm, linux-modules-5.13.0-25-generic-lpae, linux-modules-extra-5.11.0-46-generic, linux-image-generic-lpae, linux-buildinfo-5.11.0-1025-raspi-nolpae, linux-cloud-tools-5.11.0-46-generic, linux-image-5.11.0-1025-raspi-nolpae, linux-modules-extra-5.11.0-1025-aws, linux-image-5.11.0-1025-azure, linux-tools-lowlatency-hwe-20.04-edge, linux-modules-5.11.0-46-generic, linux-modules-extra-5.13.0-25-generic, linux-generic-hwe-20.04, linux-headers-raspi, linux-tools-kvm, linux-headers-generic-64k-hwe-20.04-edge, linux-tools-oem-20.04, linux-azure-headers-5.11.0-1025, linux-image-raspi, linux-modules-extra-5.13.0-1009-aws, linux-generic-lpae-hwe-20.04-edge, linux-headers-5.11.0-46-generic-64k, linux-image-5.13.0-25-generic-lpae, linux-buildinfo-5.13.0-25-generic-64k, linux-gcp-tools-5.11.0-1026, linux-oem-5.10-tools-host, linux-image-unsigned-5.13.0-25-generic, linux, linux-buildinfo-5.13.0-25-lowlatency, linux-cloud-tools-virtual, linux-tools-5.10.0-1055-oem, linux-tools-5.11.0-46-generic-lpae, linux-gcp-5.11-tools-5.11.0-1026, linux-image-unsigned-5.10.0-1055-oem, linux-buildinfo-5.13.0-1013-raspi, linux-modules-5.10.0-1055-oem, linux-cloud-tools-5.11.0-46-lowlatency, linux-headers-raspi-nolpae, linux-tools-generic-lpae-hwe-20.04, linux-buildinfo-5.10.0-1055-oem, linux-oracle, linux-cloud-tools-generic, linux-hwe-5.11-cloud-tools-common, linux-image-5.13.0-1010-azure, linux-image-unsigned-5.11.0-1025-oracle, linux-hwe-5.11, linux-image-generic-64k, linux-tools-virtual-hwe-20.04, linux-doc, linux-buildinfo-5.11.0-1026-gcp, linux-modules-extra-5.13.0-1013-raspi, linux-tools-5.13.0-1010-gcp, linux-modules-5.13.0-1010-azure, linux-tools-5.13.0-25-generic-lpae
  • USN-5218-1: linux-tools-5.13.0-1026-oem, linux-modules-5.13.0-1026-oem, linux-headers-oem-20.04c, linux-image-5.13.0-1026-oem, linux-oem-5.13, linux-oem-5.13-tools-host, linux-oem-5.13-headers-5.13.0-1026, linux-tools-oem-20.04c, linux-image-unsigned-5.13.0-1026-oem, linux-oem-5.13-tools-5.13.0-1026, linux-image-oem-20.04c, linux-headers-5.13.0-1026-oem, linux-buildinfo-5.13.0-1026-oem, linux-oem-20.04c