{"id":"USN-5106-1","summary":"linux-oem-5.10 vulnerabilities","details":"Valentina Palmiotti discovered that the io_uring subsystem in the Linux\nkernel could be coerced to free adjacent memory. A local attacker could use\nthis to execute arbitrary code. (CVE-2021-41073)\n\nIt was discovered that the Linux kernel did not properly enforce certain\ntypes of entries in the Secure Boot Forbidden Signature Database (aka dbx)\nprotection mechanism. An attacker could use this to bypass UEFI Secure Boot\nrestrictions. (CVE-2020-26541)\n\nIt was discovered that the KVM hypervisor implementation in the Linux\nkernel did not properly perform reference counting in some situations,\nleading to a use-after-free vulnerability. An attacker who could start and\ncontrol a VM could possibly use this to expose sensitive information or\nexecute arbitrary code. (CVE-2021-22543)\n\nMurray McAllister discovered that the joystick device interface in the\nLinux kernel did not properly validate data passed via an ioctl(). A local\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code on systems with a joystick device\nregistered. (CVE-2021-3612)\n\nIt was discovered that the Virtio console implementation in the Linux\nkernel did not properly validate input lengths in some situations. A local\nattacker could possibly use this to cause a denial of service (system\ncrash). (CVE-2021-38160)\n\nMichael Wakabayashi discovered that the NFSv4 client implementation in the\nLinux kernel did not properly order connection setup operations. An\nattacker controlling a remote NFS server could use this to cause a denial\nof service on the client. (CVE-2021-38199)\n\n","modified":"2026-02-10T04:42:20Z","published":"2021-10-06T19:09:39Z","related":["UBUNTU-CVE-2020-26541","UBUNTU-CVE-2021-22543","UBUNTU-CVE-2021-3612","UBUNTU-CVE-2021-38160","UBUNTU-CVE-2021-38199","UBUNTU-CVE-2021-41073"],"upstream":["CVE-2020-26541","CVE-2021-22543","CVE-2021-3612","CVE-2021-38160","CVE-2021-38199","CVE-2021-41073","UBUNTU-CVE-2020-26541","UBUNTU-CVE-2021-22543","UBUNTU-CVE-2021-3612","UBUNTU-CVE-2021-38160","UBUNTU-CVE-2021-38199","UBUNTU-CVE-2021-41073"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-5106-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2020-26541"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-3612"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-22543"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-38160"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-38199"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-41073"}],"affected":[{"package":{"name":"linux-oem-5.10","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/linux-oem-5.10@5.10.0-1049.51?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-1049.51"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47"],"ecosystem_specific":{"binaries":[{"binary_name":"linux-buildinfo-5.10.0-1049-oem","binary_version":"5.10.0-1049.51"},{"binary_name":"linux-headers-5.10.0-1049-oem","binary_version":"5.10.0-1049.51"},{"binary_name":"linux-image-unsigned-5.10.0-1049-oem","binary_version":"5.10.0-1049.51"},{"binary_name":"linux-modules-5.10.0-1049-oem","binary_version":"5.10.0-1049.51"},{"binary_name":"linux-oem-5.10-headers-5.10.0-1049","binary_version":"5.10.0-1049.51"},{"binary_name":"linux-oem-5.10-tools-5.10.0-1049","binary_version":"5.10.0-1049.51"},{"binary_name":"linux-oem-5.10-tools-host","binary_version":"5.10.0-1049.51"},{"binary_name":"linux-tools-5.10.0-1049-oem","binary_version":"5.10.0-1049.51"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5106-1.json","cves_map":{"cves":[{"id":"CVE-2020-26541","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2021-3612","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2021-22543","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2021-38160","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2021-38199","severity":[{"score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2021-41073","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:20.04:LTS"}}}],"schema_version":"1.7.3"}