p PatchFirst

LSN-0077-1

LSN-0077-1 · Kernel Live Patch Security Notice

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Vincent Dehors discovered that the shiftfs file system in the Ubuntu Linux kernel did not properly handle faults in copy_from_user() when passing through ioctls to an underlying file system. A local attacker could use this to cause a denial of service (memory exhaustion) or execute arbitrary code.(CVE-2021-3492)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • linux-gke-5.4 Ubuntu:Pro:18.04:LTS

    Versions
    • 5.4.0-1025.25~18.04.1
    • 5.4.0-1027.28~18.04.1
    • 5.4.0-1029.31~18.04.1
    • 5.4.0-1030.32~18.04.1
    • 5.4.0-1032.34~18.04.1
    • 5.4.0-1033.35~18.04.1
    • 5.4.0-1035.37~18.04.1
    • 5.4.0-1036.38~18.04.1
    • 5.4.0-1037.39~18.04.1
    • 5.4.0-1039.41~18.04.1
    • 5.4.0-1040.42~18.04.1
    Affected ranges
    • ECOSYSTEM: < 5.4.0-1042.44~18.04.1

    Update to 5.4.0-1042.44~18.04.1

  • linux-gkeop-5.4 Ubuntu:Pro:18.04:LTS

    Versions
    • 5.4.0-1001.1
    • 5.4.0-1003.3
    • 5.4.0-1004.5
    • 5.4.0-1005.6
    • 5.4.0-1007.8~18.04.1
    • 5.4.0-1008.9~18.04.1
    • 5.4.0-1009.10~18.04.1
    • 5.4.0-1010.11~18.04.1
    • 5.4.0-1011.12~18.04.2
    • 5.4.0-1012.13~18.04.1
    • 5.4.0-1013.14~18.04.1
    Affected ranges
    • ECOSYSTEM: < 5.4.0-1014.15~18.04.1

    Update to 5.4.0-1014.15~18.04.1

  • linux-hwe-5.4 Ubuntu:Pro:18.04:LTS

    Versions
    • 5.4.0-37.41~18.04.1
    • 5.4.0-39.43~18.04.1
    • 5.4.0-40.44~18.04.1
    • 5.4.0-42.46~18.04.1
    • 5.4.0-45.49~18.04.2
    • 5.4.0-47.51~18.04.1
    • 5.4.0-48.52~18.04.1
    • 5.4.0-51.56~18.04.1
    • 5.4.0-52.57~18.04.1
    • 5.4.0-53.59~18.04.1
    • 5.4.0-54.60~18.04.1
    • 5.4.0-56.62~18.04.1
    • 5.4.0-58.64~18.04.1
    • 5.4.0-59.65~18.04.1
    • 5.4.0-60.67~18.04.1
    • 5.4.0-62.70~18.04.1
    • 5.4.0-64.72~18.04.1
    • 5.4.0-65.73~18.04.1
    • 5.4.0-66.74~18.04.2
    • 5.4.0-67.75~18.04.1
    • 5.4.0-70.78~18.04.1
    • 5.4.0-71.79~18.04.1
    Affected ranges
    • ECOSYSTEM: < 5.4.0-72.80~18.04.1

    Update to 5.4.0-72.80~18.04.1

  • linux Ubuntu:Pro:20.04:LTS

    Versions
    • 5.3.0-18.19
    • 5.3.0-24.26
    • 5.4.0-9.12
    • 5.4.0-18.22
    • 5.4.0-21.25
    • 5.4.0-24.28
    • 5.4.0-25.29
    • 5.4.0-26.30
    • 5.4.0-28.32
    • 5.4.0-29.33
    • 5.4.0-31.35
    • 5.4.0-33.37
    • 5.4.0-37.41
    • 5.4.0-39.43
    • 5.4.0-40.44
    • 5.4.0-42.46
    • 5.4.0-45.49
    • 5.4.0-47.51
    • 5.4.0-48.52
    • 5.4.0-51.56
    • 5.4.0-52.57
    • 5.4.0-53.59
    • 5.4.0-54.60
    • 5.4.0-56.62
    • 5.4.0-58.64
    • 5.4.0-59.65
    • 5.4.0-60.67
    • 5.4.0-62.70
    • 5.4.0-64.72
    • 5.4.0-65.73
    • 5.4.0-66.74
    • 5.4.0-67.75
    • 5.4.0-70.78
    • 5.4.0-71.79
    Affected ranges
    • ECOSYSTEM: < 5.4.0-72.80

    Update to 5.4.0-72.80

  • linux-gcp Ubuntu:Pro:20.04:LTS

    Versions
    • 5.3.0-1004.4
    • 5.3.0-1009.10
    • 5.3.0-1011.12
    • 5.4.0-1005.5
    • 5.4.0-1007.7
    • 5.4.0-1008.8
    • 5.4.0-1009.9
    • 5.4.0-1011.11
    • 5.4.0-1015.15
    • 5.4.0-1018.18
    • 5.4.0-1019.19
    • 5.4.0-1021.21
    • 5.4.0-1022.22
    • 5.4.0-1024.24
    • 5.4.0-1025.25
    • 5.4.0-1028.29
    • 5.4.0-1029.31
    • 5.4.0-1030.32
    • 5.4.0-1032.34
    • 5.4.0-1033.35
    • 5.4.0-1034.37
    • 5.4.0-1036.39
    • 5.4.0-1037.40
    • 5.4.0-1038.41
    • 5.4.0-1040.43
    • 5.4.0-1041.44
    Affected ranges
    • ECOSYSTEM: < 5.4.0-1042.45

    Update to 5.4.0-1042.45

  • linux-gke Ubuntu:Pro:20.04:LTS

    Versions
    • 5.4.0-1033.35
    • 5.4.0-1035.37
    • 5.4.0-1036.38
    • 5.4.0-1037.39
    • 5.4.0-1039.41
    • 5.4.0-1041.43
    Affected ranges
    • ECOSYSTEM: < 5.4.0-1042.44

    Update to 5.4.0-1042.44

  • linux-gkeop Ubuntu:Pro:20.04:LTS

    Versions
    • 5.4.0-1008.9
    • 5.4.0-1009.10
    • 5.4.0-1010.11
    • 5.4.0-1011.12
    • 5.4.0-1012.13
    • 5.4.0-1013.14
    Affected ranges
    • ECOSYSTEM: < 5.4.0-1014.15

    Update to 5.4.0-1014.15

Original sources

Check your server →