p PatchFirst

USN-4367-2

USN-4367-2 · linux regression

Fix available

Are you affected?

  • linux Ubuntu 20.04 LTSUpdate to 5.4.0-33.37

Check the installed version:

dpkg-query -W -f='${source:Package} ${binary:Package} ${Version}\n' | awk '$1=="linux"'

The free check shows your server's rating and highlights whether linux and the rest of its software need attention. No sign-up; server names and IP addresses are never sent. CVE IDs, fixed versions and recommendations come with paid monitoring.

curl -fsSL https://patchfirst.dev/check.sh | sh
Check your server for free →

This page contains facts from public vulnerability sources. Check the original advisory before updating.

USN-4367-1 fixed vulnerabilities in the 5.4 Linux kernel. Unfortunately, that update introduced a regression in overlayfs. This update corrects the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the btrfs implementation in the Linux kernel did not properly detect that a block was marked dirty in some situations. An attacker could use this to specially craft a file system image that, when unmounted, could cause a denial of service (system crash). (CVE-2019-19377) It was discovered that the linux kernel did not properly validate certain mount options to the tmpfs virtual memory file system. A local attacker with the ability to specify mount options could use this to cause a denial of service (system crash). (CVE-2020-11565) It was discovered that the block layer in the Linux kernel contained a race condition leading to a use-after-free vulnerability. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2020-12657)

Published
Updated

Stack: system

Affected products and versions

  • linux Ubuntu 20.04 LTS

    Versions
    • 5.3.0-18.19
    • 5.3.0-24.26
    • 5.4.0-9.12
    • 5.4.0-18.22
    • 5.4.0-21.25
    • 5.4.0-24.28
    All versions (11)
    • 5.4.0-25.29
    • 5.4.0-26.30
    • 5.4.0-28.32
    • 5.4.0-29.33
    • 5.4.0-31.35
    Affected ranges
    • ECOSYSTEM: < 5.4.0-33.37

    Update to 5.4.0-33.37

Original sources

Check your server →