{"id":"USN-5071-2","summary":"linux-hwe-5.4 vulnerabilities","details":"USN-5071-1 fixed vulnerabilities in the Linux kernel for Ubuntu 20.04\nLTS. This update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 20.04 LTS for Ubuntu\n18.04 LTS.\n\nMaxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor\nimplementation for AMD processors in the Linux kernel allowed a guest VM to\ndisable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a\nguest VM could use this to read or write portions of the host's physical\nmemory. (CVE-2021-3656)\n\nMaxim Levitsky discovered that the KVM hypervisor implementation for AMD\nprocessors in the Linux kernel did not properly prevent a guest VM from\nenabling AVIC in nested guest VMs. An attacker in a guest VM could use this\nto write to portions of the host's physical memory. (CVE-2021-3653)\n\nIt was discovered that the KVM hypervisor implementation for AMD processors\nin the Linux kernel did not ensure enough processing time was given to\nperform cleanups of large SEV VMs. A local attacker could use this to cause\na denial of service (soft lockup). (CVE-2020-36311)\n\nIt was discovered that the KVM hypervisor implementation in the Linux\nkernel did not properly perform reference counting in some situations,\nleading to a use-after-free vulnerability. An attacker who could start and\ncontrol a VM could possibly use this to expose sensitive information or\nexecute arbitrary code. (CVE-2021-22543)\n\nMurray McAllister discovered that the joystick device interface in the\nLinux kernel did not properly validate data passed via an ioctl(). A local\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code on systems with a joystick device\nregistered. (CVE-2021-3612)\n","modified":"2026-04-27T15:56:31.394442Z","published":"2021-09-16T17:13:34Z","related":["UBUNTU-CVE-2020-36311","UBUNTU-CVE-2021-22543","UBUNTU-CVE-2021-3612","UBUNTU-CVE-2021-3653","UBUNTU-CVE-2021-3656"],"upstream":["CVE-2020-36311","CVE-2021-22543","CVE-2021-3612","CVE-2021-3653","CVE-2021-3656","UBUNTU-CVE-2020-36311","UBUNTU-CVE-2021-22543","UBUNTU-CVE-2021-3612","UBUNTU-CVE-2021-3653","UBUNTU-CVE-2021-3656"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-5071-2"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2020-36311"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-3612"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-3653"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-3656"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-22543"}],"affected":[{"package":{"name":"linux-hwe-5.4","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/linux-hwe-5.4@5.4.0-84.94~18.04.1?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-84.94~18.04.1"}]}],"versions":["5.4.0-37.41~18.04.1","5.4.0-39.43~18.04.1","5.4.0-40.44~18.04.1","5.4.0-42.46~18.04.1","5.4.0-45.49~18.04.2","5.4.0-47.51~18.04.1","5.4.0-48.52~18.04.1","5.4.0-51.56~18.04.1","5.4.0-52.57~18.04.1","5.4.0-53.59~18.04.1","5.4.0-54.60~18.04.1","5.4.0-56.62~18.04.1","5.4.0-58.64~18.04.1","5.4.0-59.65~18.04.1","5.4.0-60.67~18.04.1","5.4.0-62.70~18.04.1","5.4.0-64.72~18.04.1","5.4.0-65.73~18.04.1","5.4.0-66.74~18.04.2","5.4.0-67.75~18.04.1","5.4.0-70.78~18.04.1","5.4.0-71.79~18.04.1","5.4.0-72.80~18.04.1","5.4.0-73.82~18.04.1","5.4.0-74.83~18.04.1","5.4.0-77.86~18.04.1","5.4.0-80.90~18.04.1","5.4.0-81.91~18.04.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"block-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"block-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"crypto-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"crypto-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"dasd-extra-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"dasd-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"fat-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"fat-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"fb-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"firewire-core-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"floppy-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"fs-core-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"fs-core-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"fs-secondary-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"fs-secondary-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"input-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"input-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"ipmi-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"ipmi-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"kernel-image-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"kernel-image-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-buildinfo-5.4.0-84-generic","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-buildinfo-5.4.0-84-generic-lpae","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-buildinfo-5.4.0-84-lowlatency","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-cloud-tools-5.4.0-84-generic","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-cloud-tools-5.4.0-84-lowlatency","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-headers-5.4.0-84-generic","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-headers-5.4.0-84-generic-lpae","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-headers-5.4.0-84-lowlatency","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-hwe-5.4-cloud-tools-5.4.0-84","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-hwe-5.4-cloud-tools-common","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-hwe-5.4-headers-5.4.0-84","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-hwe-5.4-source-5.4.0","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-hwe-5.4-tools-5.4.0-84","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-hwe-5.4-tools-common","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-hwe-5.4-udebs-generic","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-hwe-5.4-udebs-generic-lpae","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-image-5.4.0-84-generic","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-image-5.4.0-84-generic-lpae","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-image-5.4.0-84-lowlatency","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-image-unsigned-5.4.0-84-generic","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-image-unsigned-5.4.0-84-lowlatency","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-modules-5.4.0-84-generic","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-modules-5.4.0-84-generic-lpae","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-modules-5.4.0-84-lowlatency","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-modules-extra-5.4.0-84-generic","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-tools-5.4.0-84-generic","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-tools-5.4.0-84-generic-lpae","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"linux-tools-5.4.0-84-lowlatency","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"md-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"md-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"message-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"mouse-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"mouse-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"multipath-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"multipath-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"nfs-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"nfs-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"nic-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"nic-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"nic-pcmcia-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"nic-shared-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"nic-shared-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"nic-usb-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"nic-usb-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"parport-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"parport-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"pata-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"pcmcia-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"pcmcia-storage-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"plip-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"plip-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"ppp-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"ppp-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"sata-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"sata-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"scsi-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"scsi-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"serial-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"storage-core-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"storage-core-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"usb-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"usb-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"virtio-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"vlan-modules-5.4.0-84-generic-di","binary_version":"5.4.0-84.94~18.04.1"},{"binary_name":"vlan-modules-5.4.0-84-generic-lpae-di","binary_version":"5.4.0-84.94~18.04.1"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2020-36311","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2021-3612","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2021-3653","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}]},{"id":"CVE-2021-3656","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}]},{"id":"CVE-2021-22543","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:18.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5071-2.json"}}],"schema_version":"1.7.5"}