QID 198586

The sctp implementation in the linux kernel did not properly perform size validations on incoming packets in some situations.
The amd cryptographic coprocessor (ccp) driver in the linux kernel did not properly deallocate memory in some error conditions.
The aspeed low pin count (lpc) bus controller implementation in the linux kernel did not properly perform boundary checks in some situations, allowing out-of-bounds write access.
The selinux subsystem in the linux kernel did not properly handle subjective credentials for tasks in some situations.

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

an attacker could possibly use this to expose sensitive information (kernel memory) (cve-2021-3655).
A local attacker could use this to cause a denial of service (memory exhaustion) (cve-2021-3744, cve-2021-3764).
A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
In ubuntu, this issue only affected systems running armhf kernels. (
Cve-2021-42252).
On systems where selinux has been enabled, a local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code.
(cve-2021-43057).