USN-4320-1

Details

Al Viro discovered that the vfs layer in the Linux kernel contained a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory).

Affected Packages

Ubuntu:16.04:LTSlinux

Fixed in:

4.4.0-177.207

Ubuntu:16.04:LTSlinux-aws

Fixed in:

4.4.0-1105.116

Ubuntu:16.04:LTSlinux-kvm

Fixed in:

4.4.0-1069.76

Ubuntu:16.04:LTSlinux-raspi2

Fixed in:

4.4.0-1131.140

Ubuntu:16.04:LTSlinux-snapdragon

Fixed in:

4.4.0-1135.143

Ubuntu:Pro:14.04:LTSlinux-aws

Fixed in:

4.4.0-1065.69

Ubuntu:Pro:14.04:LTSlinux-lts-xenial

Fixed in:

4.4.0-177.207~14.04.1

References

REPORThttps://ubuntu.com/security/CVE-2020-8428 ADVISORYhttps://ubuntu.com/security/notices/USN-4320-1

USN-4320-1

Details

Affected Packages

References

Upstream

Ecosystems

Timeline