USN-5002-1

Details

Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code.

Affected Packages

linux-gke-5.3

Ubuntu 18.04 LTS

Fixed in:

5.3.0-1044.47

linux-hwe

Ubuntu 18.04 LTS

Fixed in:

5.3.0-75.71

linux-raspi2-5.3

Ubuntu 18.04 LTS

Fixed in:

5.3.0-1041.43

References

REPORT

https://ubuntu.com/security/CVE-2021-3609

ADVISORY

https://ubuntu.com/security/notices/USN-5002-1