Use of insufficiently random values in Linux kernel - CVE-2020-25705

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU49150

Use of insufficiently random values in Linux kernel - CVE-2020-25705

Published: November 17, 2020 / Updated: August 15, 2021


Vulnerability identifier: #VU49150
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-25705
CWE-ID: CWE-330
Exploitation vector: Remote access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to gain access to sensitive information.

A flaw in the way reply ICMP packets are limited in the Linux kernel functionality was found that allows to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.


Affected software

Linux kernel
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Ubuntu
openEuler
Google Android
SIMATIC NET CP 1243-8 IRC
SIMATIC NET CP 1243-1
SIMATIC NET CP 1243-7 LTE EU
SCALANCE M-800 / S615
SIMATIC NET CP 1243-7 LTE US
SIMATIC NET CP 1243-7
SIMATIC NET CP 1542SP-1 IRC
SIMATIC NET CP 1543-1
SIMATIC NET CP 1543SP-1
SIMATIC NET CP 1545-1
TIM 1531 IRC
SCALANCE W1750D
BIG-IP SSLO
BIG-IP
BIG-IP DDHD
SIMATIC MV500
BIG-IP ASM
BIG-IP FPS
BIG-IP GTM
BIG-IP LTM
BIG-IP Analytics
BIG-IP PEM
BIG-IP AFM
BIG-IP APM
SIMATIC Cloud Connect 7
RUGGEDCOM RM1224
BIG-IP DNS
BIG-IP AAM
BIG-IP Link Controller
SCALANCE SC-600
kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
linux-image-lowlatency-lts-xenial (Ubuntu package)
linux-image-generic-lpae-lts-xenial (Ubuntu package)
linux-image-generic-lts-xenial (Ubuntu package)
linux-image-powerpc-e500mc-lts-xenial (Ubuntu package)
linux-image-powerpc-smp-lts-xenial (Ubuntu package)
linux-image-powerpc64-emb-lts-xenial (Ubuntu package)
linux-image-powerpc64-smp-lts-xenial (Ubuntu package)
linux-image-virtual-lts-xenial (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-powerpc64-smp (Ubuntu package)
linux-image-powerpc64-emb (Ubuntu package)
linux-image-powerpc-smp (Ubuntu package)
linux-image-powerpc-e500mc (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-4.4.0-197-generic (Ubuntu package)
linux-image-4.4.0-197-powerpc64-emb (Ubuntu package)
linux-image-4.4.0-197-generic-lpae (Ubuntu package)
linux-image-4.4.0-197-powerpc-smp (Ubuntu package)
linux-image-4.4.0-197-powerpc64-smp (Ubuntu package)
linux-image-4.4.0-197-lowlatency (Ubuntu package)
linux-image-4.4.0-197-powerpc-e500mc (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-4.4.0-1082-aws (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.4.0-1084-kvm (Ubuntu package)
linux-image-4.4.0-1118-aws (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.4.0-1142-raspi2 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.4.0-1146-snapdragon (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-generic-lpae-hwe-16.04 (Ubuntu package)
linux-image-4.15.0-129-generic-lpae (Ubuntu package)
linux-image-4.15.0-129-generic (Ubuntu package)
linux-image-4.15.0-129-lowlatency (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-4.15.0-1062-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-gke-4.15 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-4.15.0-1077-raspi2 (Ubuntu package)
linux-image-4.15.0-1077-gke (Ubuntu package)
linux-image-4.15.0-1082-kvm (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1091-aws (Ubuntu package)
linux-image-4.15.0-1091-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1094-snapdragon (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-4.15.0-1103-azure (Ubuntu package)
python2-perf-debuginfo
kernel-devel
kernel-source
perf
kernel
bpftool
kernel-debugsource
kernel-tools
kernel-debuginfo
perf-debuginfo
python3-perf-debuginfo
python2-perf
python3-perf
bpftool-debuginfo
kernel-tools-devel
kernel-tools-debuginfo
python-perf
kernel-tools-libs-devel
kernel-tools-libs
kernel-headers
kernel-debug-devel
kernel-debug
linux-image-oem-osp1 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-5.4.0-56-generic (Ubuntu package)
linux-image-5.4.0-56-generic-lpae (Ubuntu package)
linux-image-5.4.0-56-lowlatency (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-58-generic (Ubuntu package)
linux-image-5.4.0-58-generic-lpae (Ubuntu package)
linux-image-5.4.0-58-lowlatency (Ubuntu package)
linux-image-5.4.0-1023-raspi (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1025-raspi (Ubuntu package)
linux-image-5.4.0-1028-kvm (Ubuntu package)
linux-image-5.4.0-1030-kvm (Ubuntu package)
linux-image-5.4.0-1030-aws (Ubuntu package)
linux-image-5.4.0-1030-oracle (Ubuntu package)
linux-image-5.4.0-1030-gcp (Ubuntu package)
linux-image-5.4.0-1032-azure (Ubuntu package)
linux-image-5.4.0-1032-aws (Ubuntu package)
linux-image-5.4.0-1032-oracle (Ubuntu package)
linux-image-5.4.0-1032-gcp (Ubuntu package)
linux-image-5.4.0-1033-oracle (Ubuntu package)
linux-image-5.4.0-1034-azure (Ubuntu package)
linux-image-5.8.0-31-generic-64k (Ubuntu package)
linux-image-5.8.0-31-lowlatency (Ubuntu package)
linux-image-5.8.0-31-generic (Ubuntu package)
linux-image-5.8.0-31-generic-lpae (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-5.8.0-33-lowlatency (Ubuntu package)
linux-image-5.8.0-33-generic-lpae (Ubuntu package)
linux-image-5.8.0-33-generic-64k (Ubuntu package)
linux-image-5.8.0-33-generic (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1008-raspi (Ubuntu package)
linux-image-5.8.0-1008-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1010-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1010-raspi (Ubuntu package)
linux-image-5.8.0-1011-oracle (Ubuntu package)
linux-image-5.8.0-1011-kvm (Ubuntu package)
linux-image-5.8.0-1012-gcp (Ubuntu package)
linux-image-5.8.0-1013-oracle (Ubuntu package)
linux-image-5.8.0-1013-azure (Ubuntu package)
linux-image-5.8.0-1013-kvm (Ubuntu package)
linux-image-5.8.0-1014-gcp (Ubuntu package)
linux-image-5.8.0-1014-aws (Ubuntu package)
linux-image-5.8.0-1015-azure (Ubuntu package)
linux-image-5.8.0-1016-aws (Ubuntu package)
BIG-IQ Centralized Management
Juniper Junos Space
IBM Security Guardium
BIG-IP Advanced WAF
Red Hat Advanced Cluster Management for Kubernetes
Session Smart Router
SINEMA Remote Connect Server
Data Computing Appliance (DCA)
IBM MQ Appliance
RSA Authentication Manager
IBM DataPower Gateway

How to mitigate CVE-2020-25705

Install updates from vendor's website.

Linux kernel - update to 5.10 rc1
SCALANCE M-800 / S615 - update to 6.4
RUGGEDCOM RM1224 - update to 6.4
kernel (Red Hat package) - addressed in versions 3.10.0-693.87.1.el7, 3.10.0-957.76.1.el7, 3.10.0-1062.49.1.el7, 3.10.0-1160.21.1.el7, 4.18.0-240.15.1.el8_3
kernel-rt (Red Hat package) - addressed in versions 3.10.0-1160.21.1.rt56.1158.el7, 4.18.0-240.15.1.rt7.69.el8_3
Red Hat Advanced Cluster Management for Kubernetes - update to 2.0.8
SCALANCE SC-600 - update to 2.1.3
SINEMA Remote Connect Server - update to 3.0 SP1
Data Computing Appliance (DCA) - update to 4.3.0.0
linux-image-lowlatency-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-generic-lpae-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-generic-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-powerpc-e500mc-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-powerpc-smp-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-powerpc64-emb-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-powerpc64-smp-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-virtual-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-virtual (Ubuntu package) - addressed in versions 4.4.0.197.203, 4.15.0.129.116, 5.4.0.56.59, 5.4.0.58.61, 5.8.0.31.36, 5.8.0.33.38
linux-image-powerpc64-smp (Ubuntu package) - update to 4.4.0.197.203
linux-image-powerpc64-emb (Ubuntu package) - update to 4.4.0.197.203
linux-image-powerpc-smp (Ubuntu package) - update to 4.4.0.197.203
linux-image-powerpc-e500mc (Ubuntu package) - update to 4.4.0.197.203
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.4.0.197.203, 4.15.0.129.116, 5.4.0.56.59, 5.4.0.58.61, 5.8.0.31.36, 5.8.0.33.38
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.4.0.197.203, 4.15.0.129.116, 5.4.0.56.59, 5.4.0.58.61, 5.8.0.31.36, 5.8.0.33.38
linux-image-generic (Ubuntu package) - addressed in versions 4.4.0.197.203, 4.15.0.129.116, 5.4.0.56.59, 5.4.0.58.61, 5.8.0.31.36, 5.8.0.33.38
linux-image-4.4.0-197-generic (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-4.4.0-197-powerpc64-emb (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-4.4.0-197-generic-lpae (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-4.4.0-197-powerpc-smp (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-4.4.0-197-powerpc64-smp (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-4.4.0-197-lowlatency (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-4.4.0-197-powerpc-e500mc (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-aws (Ubuntu package) - addressed in versions 4.4.0.1082.79, 4.4.0.1118.123, 5.4.0.1030.15, 5.4.0.1030.31, 5.4.0.1032.17, 5.4.0.1032.33, 5.8.0.1014.16, 5.8.0.1016.18
linux-image-4.4.0-1082-aws (Ubuntu package) - update to 4.4.0-1082.86
linux-image-kvm (Ubuntu package) - addressed in versions 4.4.0.1084.82, 4.15.0.1082.78, 5.4.0.1028.26, 5.4.0.1030.28, 5.8.0.1011.12, 5.8.0.1013.15
linux-image-4.4.0-1084-kvm (Ubuntu package) - update to 4.4.0-1084.93
linux-image-4.4.0-1118-aws (Ubuntu package) - update to 4.4.0-1118.132
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.4.0.1142.142, 4.15.0.1077.74, 5.4.0.1023.58, 5.4.0.1025.60
linux-image-4.4.0-1142-raspi2 (Ubuntu package) - update to 4.4.0-1142.152
linux-image-snapdragon (Ubuntu package) - addressed in versions 4.4.0.1146.138, 4.15.0.1094.97
linux-image-4.4.0-1146-snapdragon (Ubuntu package) - update to 4.4.0-1146.156
linux-image-generic-hwe-16.04 (Ubuntu package) - update to 4.15.0.129.128
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to 4.15.0.129.128
linux-image-oem (Ubuntu package) - addressed in versions 4.15.0.129.128, 5.4.0.56.59, 5.4.0.58.61, 5.4.0.58.64~18.04.53
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to 4.15.0.129.128
linux-image-generic-lpae-hwe-16.04 (Ubuntu package) - update to 4.15.0.129.128
linux-image-4.15.0-129-generic-lpae (Ubuntu package) - update to 4.15.0-129.132~16.04.1
linux-image-4.15.0-129-generic (Ubuntu package) - update to 4.15.0-129.132~16.04.1
linux-image-4.15.0-129-lowlatency (Ubuntu package) - update to 4.15.0-129.132~16.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 4.15.0.1062.51, 5.4.0.1030.14, 5.4.0.1030.27, 5.4.0.1032.29, 5.4.0.1033.16, 5.8.0.1011.11, 5.8.0.1013.13
linux-image-4.15.0-1062-oracle (Ubuntu package) - update to 4.15.0-1062.68~16.04.1
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1062.72
linux-image-gke-4.15 (Ubuntu package) - update to 4.15.0.1077.81
linux-image-gke (Ubuntu package) - addressed in versions 4.15.0.1077.81, 4.15.0.1091.92, 5.4.0.1030.38, 5.4.0.1032.41, 5.8.0.1012.12, 5.8.0.1014.14
linux-image-4.15.0-1077-raspi2 (Ubuntu package) - update to 4.15.0-1077.82
linux-image-4.15.0-1077-gke (Ubuntu package) - update to 4.15.0-1077.82
linux-image-4.15.0-1082-kvm (Ubuntu package) - update to 4.15.0-1082.84
linux-image-aws-hwe (Ubuntu package) - update to 4.15.0.1091.85
linux-image-gcp (Ubuntu package) - addressed in versions 4.15.0.1091.92, 5.4.0.1030.18, 5.4.0.1030.38, 5.4.0.1032.20, 5.4.0.1032.41, 5.8.0.1012.12, 5.8.0.1014.14
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1091.93
linux-image-4.15.0-1091-aws (Ubuntu package) - update to 4.15.0-1091.96~16.04.1
linux-image-4.15.0-1091-gcp (Ubuntu package) - update to 4.15.0-1091.104~16.04.1
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1091.109
linux-image-4.15.0-1094-snapdragon (Ubuntu package) - update to 4.15.0-1094.103
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1103.76
linux-image-azure (Ubuntu package) - addressed in versions 4.15.0.1103.78, 4.15.0.1103.96, 5.4.0.1032.14, 5.4.0.1032.30, 5.4.0.1034.16, 5.4.0.1034.32, 5.8.0.1013.13, 5.8.0.1015.15
linux-image-4.15.0-1103-azure (Ubuntu package) - addressed in versions 4.15.0-1103.114~14.04.1, 4.15.0-1103.114~16.04.1
python2-perf-debuginfo - update to 4.19.90-2012.5.0.0054
kernel-devel - update to 4.19.90-2012.5.0.0054
kernel-source - update to 4.19.90-2012.5.0.0054
perf - update to 4.19.90-2012.5.0.0054
kernel - update to 4.19.90-2012.5.0.0054
bpftool - update to 4.19.90-2012.5.0.0054
kernel-debugsource - update to 4.19.90-2012.5.0.0054
kernel-tools - update to 4.19.90-2012.5.0.0054
kernel-debuginfo - update to 4.19.90-2012.5.0.0054
perf-debuginfo - update to 4.19.90-2012.5.0.0054
python3-perf-debuginfo - update to 4.19.90-2012.5.0.0054
python2-perf - update to 4.19.90-2012.5.0.0054
python3-perf - update to 4.19.90-2012.5.0.0054
bpftool-debuginfo - update to 4.19.90-2012.5.0.0054
kernel-tools-devel - update to 4.19.90-2012.5.0.0054
kernel-tools-debuginfo - update to 4.19.90-2012.5.0.0054
python-perf - update to 4.19.91-26
kernel - update to 4.19.91-26
perf - update to 4.19.91-26
bpftool - update to 4.19.91-26
kernel-tools-libs-devel - update to 4.19.91-26
kernel-tools-libs - update to 4.19.91-26
kernel-tools - update to 4.19.91-26
kernel-headers - update to 4.19.91-26
kernel-devel - update to 4.19.91-26
kernel-debug-devel - update to 4.19.91-26
kernel-debug - update to 4.19.91-26
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.56.59, 5.4.0.56.62~18.04.50, 5.4.0.58.61, 5.4.0.58.64~18.04.53
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.4.0.56.59
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.4.0.56.59
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.4.0.56.59
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.4.0.56.59
linux-image-5.4.0-56-generic (Ubuntu package) - update to 5.4.0-56.62~18.04.1
linux-image-5.4.0-56-generic-lpae (Ubuntu package) - update to 5.4.0-56.62~18.04.1
linux-image-5.4.0-56-lowlatency (Ubuntu package) - update to 5.4.0-56.62~18.04.1
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - addressed in versions 5.4.0.56.62~18.04.50, 5.4.0.58.64~18.04.53
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - addressed in versions 5.4.0.56.62~18.04.50, 5.4.0.58.64~18.04.53
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - addressed in versions 5.4.0.56.62~18.04.50, 5.4.0.58.64~18.04.53
linux-image-virtual-hwe-18.04 (Ubuntu package) - addressed in versions 5.4.0.56.62~18.04.50, 5.4.0.58.64~18.04.53
linux-image-generic-hwe-18.04 (Ubuntu package) - addressed in versions 5.4.0.56.62~18.04.50, 5.4.0.58.64~18.04.53
linux-image-5.4.0-58-generic (Ubuntu package) - update to 5.4.0-58.64~18.04.1
linux-image-5.4.0-58-generic-lpae (Ubuntu package) - update to 5.4.0-58.64~18.04.1
linux-image-5.4.0-58-lowlatency (Ubuntu package) - update to 5.4.0-58.64~18.04.1
linux-image-5.4.0-1023-raspi (Ubuntu package) - update to 5.4.0-1023.26~18.04.1
linux-image-raspi-hwe-18.04 (Ubuntu package) - addressed in versions 5.4.0.1023.27, 5.4.0.1025.29
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1023.58, 5.4.0.1025.60, 5.8.0.1008.11, 5.8.0.1010.13
linux-image-5.4.0-1025-raspi (Ubuntu package) - update to 5.4.0-1025.28~18.04.1
linux-image-5.4.0-1028-kvm (Ubuntu package) - update to 5.4.0-1028.29
linux-image-5.4.0-1030-kvm (Ubuntu package) - update to 5.4.0-1030.31
linux-image-5.4.0-1030-aws (Ubuntu package) - update to 5.4.0-1030.31~18.04.1
linux-image-5.4.0-1030-oracle (Ubuntu package) - update to 5.4.0-1030.32~18.04.1
linux-image-5.4.0-1030-gcp (Ubuntu package) - update to 5.4.0-1030.32~18.04.1
linux-image-5.4.0-1032-azure (Ubuntu package) - update to 5.4.0-1032.33~18.04.1
linux-image-5.4.0-1032-aws (Ubuntu package) - update to 5.4.0-1032.33~18.04.1
linux-image-5.4.0-1032-oracle (Ubuntu package) - update to 5.4.0-1032.34
linux-image-5.4.0-1032-gcp (Ubuntu package) - update to 5.4.0-1032.34~18.04.1
linux-image-5.4.0-1033-oracle (Ubuntu package) - update to 5.4.0-1033.35
linux-image-5.4.0-1034-azure (Ubuntu package) - update to 5.4.0-1034.35~18.04.1
Session Smart Router - addressed in versions 5.4.7, 5.5.3
linux-image-5.8.0-31-generic-64k (Ubuntu package) - update to 5.8.0-31.33
linux-image-5.8.0-31-lowlatency (Ubuntu package) - update to 5.8.0-31.33
linux-image-5.8.0-31-generic (Ubuntu package) - update to 5.8.0-31.33
linux-image-5.8.0-31-generic-lpae (Ubuntu package) - update to 5.8.0-31.33
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.8.0.31.36, 5.8.0.33.38
linux-image-oem-20.04 (Ubuntu package) - addressed in versions 5.8.0.31.36, 5.8.0.33.38
linux-image-5.8.0-33-lowlatency (Ubuntu package) - update to 5.8.0-33.36
linux-image-5.8.0-33-generic-lpae (Ubuntu package) - update to 5.8.0-33.36
linux-image-5.8.0-33-generic-64k (Ubuntu package) - update to 5.8.0-33.36
linux-image-5.8.0-33-generic (Ubuntu package) - update to 5.8.0-33.36
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.8.0.1008.11, 5.8.0.1010.13
linux-image-5.8.0-1008-raspi (Ubuntu package) - update to 5.8.0-1008.11
linux-image-5.8.0-1008-raspi-nolpae (Ubuntu package) - update to 5.8.0-1008.11
linux-image-5.8.0-1010-raspi-nolpae (Ubuntu package) - update to 5.8.0-1010.13
linux-image-5.8.0-1010-raspi (Ubuntu package) - update to 5.8.0-1010.13
linux-image-5.8.0-1011-oracle (Ubuntu package) - update to 5.8.0-1011.11
linux-image-5.8.0-1011-kvm (Ubuntu package) - update to 5.8.0-1011.12
linux-image-5.8.0-1012-gcp (Ubuntu package) - update to 5.8.0-1012.12
linux-image-5.8.0-1013-oracle (Ubuntu package) - update to 5.8.0-1013.13
linux-image-5.8.0-1013-azure (Ubuntu package) - update to 5.8.0-1013.14
linux-image-5.8.0-1013-kvm (Ubuntu package) - update to 5.8.0-1013.14
linux-image-5.8.0-1014-gcp (Ubuntu package) - update to 5.8.0-1014.14
linux-image-5.8.0-1014-aws (Ubuntu package) - update to 5.8.0-1014.15
linux-image-5.8.0-1015-azure (Ubuntu package) - update to 5.8.0-1015.16
linux-image-5.8.0-1016-aws (Ubuntu package) - update to 5.8.0-1016.17
RSA Authentication Manager - update to 8.5 Patch 3
Google Android - addressed in versions 9.0 2021-04-05, 10 2021-04-05, 11 2021-04-05
IBM MQ Appliance - addressed in versions 9.2.0.7, 9.2.5.4
IBM DataPower Gateway - addressed in versions 10.0.1.11, 10.0.5.0, 2018.4.1.24
Juniper Junos Space - update to 21.2R1

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins