QID 198544

Date Published: 2021-10-29

QID 198544: Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5116-1)

A race condition existed in the atheros ath9k wifi driver in the linux kernel.
The overlay file system in the linux kernel did not restrict private clones in some situations.
The kvm hypervisor implementation in the linux kernel did not properly compute the access permissions for shadow pages in some situations.
The xilinx 10/100 ethernet lite device driver in the linux kernel could report pointer addresses in some situations.
The ext4 file system in the linux kernel contained a race condition when writing xattrs to an inode.
The 6pack network protocol driver in the linux kernel did not properly perform validation checks.

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

an attacker could possibly use this to expose sensitive information (wifi network traffic) (cve-2020-3702).
An attacker could use this to expose sensitive information. (
Cve-2021-3732).
A local attacker could use this to cause a denial of service. (
Cve-2021-38198).
An attacker could use this information to ease the exploitation of another vulnerability. (
Cve-2021-38205).
A local attacker could use this to cause a denial of service or possibly gain administrative privileges. (
Cve-2021-40490).
A privileged attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (
Cve-2021-42008).

  • CVSS V3 rated as High - 7.8 severity.
  • CVSS V2 rated as High - 6.9 severity.
  • Solution
    Refer to Ubuntu advisory: USN-5116-1 for affected packages and patching details, or update with your package manager.
    Vendor References
    Software Advisories
    Advisory ID Software Component Link
    USN-5116-1 Ubuntu Linux URL Logo ubuntu.com/security/notices/USN-5116-1