USN-5002-1

Details

Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code.

Affected Packages

Ubuntu:18.04:LTSlinux-gke-5.3

Fixed in:

5.3.0-1044.47

Ubuntu:18.04:LTSlinux-hwe

Fixed in:

5.3.0-75.71

Ubuntu:18.04:LTSlinux-raspi2-5.3

Fixed in:

5.3.0-1041.43

References

REPORThttps://ubuntu.com/security/CVE-2021-3609 ADVISORYhttps://ubuntu.com/security/notices/USN-5002-1

USN-5002-1

Details

Affected Packages

References

Upstream

Ecosystems

Timeline