{"id":"USN-5120-1","summary":"linux-azure-5.8 vulnerabilities","details":"It was discovered that the f2fs file system in the Linux kernel did not\nproperly validate metadata in some situations. An attacker could use this\nto construct a malicious f2fs image that, when mounted and operated on,\ncould cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2019-19449)\n\nIt was discovered that the Linux kernel did not properly enforce certain\ntypes of entries in the Secure Boot Forbidden Signature Database (aka dbx)\nprotection mechanism. An attacker could use this to bypass UEFI Secure Boot\nrestrictions. (CVE-2020-26541)\n\nIt was discovered that the KVM hypervisor implementation for AMD processors\nin the Linux kernel did not ensure enough processing time was given to\nperform cleanups of large SEV VMs. A local attacker could use this to cause\na denial of service (soft lockup). (CVE-2020-36311)\n\nIt was discovered that the KVM hypervisor implementation in the Linux\nkernel did not properly perform reference counting in some situations,\nleading to a use-after-free vulnerability. An attacker who could start and\ncontrol a VM could possibly use this to expose sensitive information or\nexecute arbitrary code. (CVE-2021-22543)\n\nMurray McAllister discovered that the joystick device interface in the\nLinux kernel did not properly validate data passed via an ioctl(). A local\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code on systems with a joystick device\nregistered. (CVE-2021-3612)\n\nIt was discovered that the Linux kernel did not properly account for the\nmemory usage of certain IPC objects. A local attacker could use this to\ncause a denial of service (memory exhaustion). (CVE-2021-3759)\n\nMichael Wakabayashi discovered that the NFSv4 client implementation in the\nLinux kernel did not properly order connection setup operations. An\nattacker controlling a remote NFS server could use this to cause a denial\nof service on the client. (CVE-2021-38199)\n\nIt was discovered that the Xilinx LL TEMAC device driver in the Linux\nkernel did not properly calculate the number of buffers to be used in\ncertain situations. A remote attacker could use this to cause a denial of\nservice (system crash). (CVE-2021-38207)\n\nIt was discovered that the ext4 file system in the Linux kernel contained a\nrace condition when writing xattrs to an inode. A local attacker could use\nthis to cause a denial of service or possibly gain administrative\nprivileges. (CVE-2021-40490)\n","modified":"2026-02-10T04:42:21Z","published":"2021-10-21T23:52:40Z","related":["UBUNTU-CVE-2019-19449","UBUNTU-CVE-2020-26541","UBUNTU-CVE-2020-36311","UBUNTU-CVE-2021-22543","UBUNTU-CVE-2021-3612","UBUNTU-CVE-2021-3759","UBUNTU-CVE-2021-38199","UBUNTU-CVE-2021-38207","UBUNTU-CVE-2021-40490"],"upstream":["CVE-2019-19449","CVE-2020-26541","CVE-2020-36311","CVE-2021-22543","CVE-2021-3612","CVE-2021-3759","CVE-2021-38199","CVE-2021-38207","CVE-2021-40490","UBUNTU-CVE-2019-19449","UBUNTU-CVE-2020-26541","UBUNTU-CVE-2020-36311","UBUNTU-CVE-2021-22543","UBUNTU-CVE-2021-3612","UBUNTU-CVE-2021-3759","UBUNTU-CVE-2021-38199","UBUNTU-CVE-2021-38207","UBUNTU-CVE-2021-40490"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-5120-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-19449"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2020-26541"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2020-36311"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-3612"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-3759"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-22543"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-38199"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-38207"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-40490"}],"affected":[{"package":{"name":"linux-azure-5.8","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/linux-azure-5.8@5.8.0-1043.46~20.04.1?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-1043.46~20.04.1"}]}],"versions":["5.8.0-1033.35~20.04.1","5.8.0-1036.38~20.04.1","5.8.0-1039.42~20.04.1","5.8.0-1040.43~20.04.1","5.8.0-1041.44~20.04.1","5.8.0-1042.45~20.04.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-azure-5.8-cloud-tools-5.8.0-1043","binary_version":"5.8.0-1043.46~20.04.1"},{"binary_name":"linux-azure-5.8-headers-5.8.0-1043","binary_version":"5.8.0-1043.46~20.04.1"},{"binary_name":"linux-azure-5.8-tools-5.8.0-1043","binary_version":"5.8.0-1043.46~20.04.1"},{"binary_name":"linux-buildinfo-5.8.0-1043-azure","binary_version":"5.8.0-1043.46~20.04.1"},{"binary_name":"linux-cloud-tools-5.8.0-1043-azure","binary_version":"5.8.0-1043.46~20.04.1"},{"binary_name":"linux-headers-5.8.0-1043-azure","binary_version":"5.8.0-1043.46~20.04.1"},{"binary_name":"linux-image-unsigned-5.8.0-1043-azure","binary_version":"5.8.0-1043.46~20.04.1"},{"binary_name":"linux-modules-5.8.0-1043-azure","binary_version":"5.8.0-1043.46~20.04.1"},{"binary_name":"linux-modules-extra-5.8.0-1043-azure","binary_version":"5.8.0-1043.46~20.04.1"},{"binary_name":"linux-tools-5.8.0-1043-azure","binary_version":"5.8.0-1043.46~20.04.1"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:20.04:LTS","cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"low"}],"id":"CVE-2019-19449"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-26541"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2020-36311"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2021-3612"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2021-3759"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2021-22543"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2021-38199"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2021-38207"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2021-40490"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5120-1.json"}}],"schema_version":"1.7.3"}