Path traversal in Linux kernel - CVE-2020-28374

 

Path traversal in Linux kernel - CVE-2020-28374

Published: January 13, 2021 / Updated: January 21, 2021


Vulnerability identifier: #VU49914
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-28374
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences in drivers/target/target_core_xcopy.c in the Linux kernel. A remote user with access to iSCSI LUN can send a specially crafted XCOPY request and read or write arbitrary files on the system.



Affected software

Linux kernel
Arch Linux
Amazon Linux AMI
ClevOS
Red Hat Enterprise Linux Workstation
SUSE OpenStack Cloud
Red Hat Enterprise Linux Server
Anolis OS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux EUS Compute Node
SUSE OpenStack Cloud Crowbar
HPE Helion Openstack
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Server
SUSE Linux Enterprise Live Patching
Ubuntu
SUSE Linux Enterprise Module for Live Patching
openEuler
Fedora
kpatch-patch-3_10_0-1062_45_1 (Red Hat package)
kpatch-patch-3_10_0-957_54_1 (Red Hat package)
kpatch-patch-3_10_0-1062_43_1 (Red Hat package)
kpatch-patch-3_10_0-1062_40_1 (Red Hat package)
kpatch-patch-3_10_0-1062_37_1 (Red Hat package)
kpatch-patch-3_10_0-1062_36_1 (Red Hat package)
kpatch-patch-3_10_0-1062_33_1 (Red Hat package)
kpatch-patch-3_10_0-1062_31_3 (Red Hat package)
kpatch-patch-3_10_0-1062_31_2 (Red Hat package)
kpatch-patch-3_10_0-1062_30_1 (Red Hat package)
kpatch-patch-3_10_0-1062_26_1 (Red Hat package)
kpatch-patch-3_10_0-957_66_1 (Red Hat package)
kpatch-patch-3_10_0-957_65_1 (Red Hat package)
kpatch-patch-3_10_0-957_62_1 (Red Hat package)
kpatch-patch-3_10_0-957_61_2 (Red Hat package)
kpatch-patch-3_10_0-957_61_1 (Red Hat package)
kpatch-patch-3_10_0-957_58_2 (Red Hat package)
kpatch-patch-3_10_0-957_56_1 (Red Hat package)
kpatch-patch-4_18_0-147_43_1 (Red Hat package)
kpatch-patch-4_18_0-147_38_1 (Red Hat package)
kpatch-patch-4_18_0-193_40_1 (Red Hat package)
kpatch-patch-4_18_0-193_37_1 (Red Hat package)
kpatch-patch-4_18_0-193_29_1 (Red Hat package)
kpatch-patch-4_18_0-193_47_1 (Red Hat package)
kpatch-patch-4_18_0-193_41_1 (Red Hat package)
kpatch-patch-4_18_0-193_46_1 (Red Hat package)
kpatch-patch-4_18_0-193_28_1 (Red Hat package)
kpatch-patch-4_18_0-147_34_1 (Red Hat package)
kpatch-patch-4_18_0-147_32_1 (Red Hat package)
kpatch-patch-4_18_0-193_14_3 (Red Hat package)
kpatch-patch-4_18_0-193_19_1 (Red Hat package)
kpatch-patch-4_18_0-193_13_2 (Red Hat package)
kpatch-patch-4_18_0-147_24_2 (Red Hat package)
kpatch-patch-4_18_0-147_27_1 (Red Hat package)
kpatch-patch-4_18_0-193_6_3 (Red Hat package)
kpatch-patch-4_18_0-147_20_1 (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
kpatch-patch-4_18_0-193_51_1 (Red Hat package)
kpatch-patch-3_10_0-1160_11_1 (Red Hat package)
kpatch-patch-3_10_0-1160_15_2 (Red Hat package)
kpatch-patch-3_10_0-957_70_1 (Red Hat package)
kpatch-patch-3_10_0-1062_46_1 (Red Hat package)
kpatch-patch-3_10_0-1160_6_1 (Red Hat package)
kpatch-patch-3_10_0-1160_2_2 (Red Hat package)
kpatch-patch-3_10_0-1160_2_1 (Red Hat package)
kpatch-patch-3_10_0-1160 (Red Hat package)
kpatch-patch-4_18_0-147_44_1 (Red Hat package)
kgraft-patch-4_4_121-92_152-default
kgraft-patch-4_4_180-94_141-default-debuginfo
kgraft-patch-4_4_180-94_141-default
tcmu-runner
kgraft-patch-4_4_121-92_149-default
kgraft-patch-4_4_180-94_138-default-debuginfo
kgraft-patch-4_4_180-94_138-default
kernel-livepatch-SLE15-SP2_Update_8-debugsource
kernel-livepatch-5_3_18-24_43-default-debuginfo
kernel-livepatch-5_3_18-24_43-default
kgraft-patch-4_12_14-95_65-default
linux-image-highbank (Ubuntu package)
linux-image-powerpc-smp (Ubuntu package)
linux-image-powerpc64-emb (Ubuntu package)
linux-image-powerpc64-smp (Ubuntu package)
linux-image-server (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-powerpc-e500mc (Ubuntu package)
linux-image-powerpc-e500 (Ubuntu package)
linux-image-omap (Ubuntu package)
linux-image-lowlatency-pae (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic-pae (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-3.13.0-184-lowlatency (Ubuntu package)
linux-image-3.13.0-184-powerpc64-smp (Ubuntu package)
linux-image-3.13.0-184-powerpc64-emb (Ubuntu package)
linux-image-3.13.0-184-powerpc-smp (Ubuntu package)
linux-image-3.13.0-184-powerpc-e500mc (Ubuntu package)
linux-image-3.13.0-184-powerpc-e500 (Ubuntu package)
linux-image-3.13.0-184-generic (Ubuntu package)
linux-image-3.13.0-184-generic-lpae (Ubuntu package)
linux-image-generic-lts-trusty (Ubuntu package)
linux-image-3.13.0-185-generic (Ubuntu package)
kernel-livepatch-SLE15-SP2_Update_7-debugsource
kernel-livepatch-5_3_18-24_29-default
kernel-livepatch-5_3_18-24_29-default-debuginfo
kgraft-patch-4_4_121-92_146-default
kgraft-patch-4_4_180-94_135-default-debuginfo
kgraft-patch-4_4_180-94_135-default
kernel-livepatch-5_3_18-24_34-default
kernel-livepatch-5_3_18-24_34-default-debuginfo
kernel-livepatch-5_3_18-24_37-default
kernel-livepatch-4_12_14-150_63-default-debuginfo
kernel-livepatch-4_12_14-150_63-default
kernel-livepatch-5_3_18-24_37-default-debuginfo
kernel-livepatch-SLE15-SP2_Update_5-debugsource
kernel-livepatch-SLE15-SP2_Update_6-debugsource
linux-image-powerpc64-smp-lts-xenial (Ubuntu package)
linux-image-generic-lpae-lts-xenial (Ubuntu package)
linux-image-generic-lts-xenial (Ubuntu package)
linux-image-lowlatency-lts-xenial (Ubuntu package)
linux-image-powerpc-e500mc-lts-xenial (Ubuntu package)
linux-image-powerpc-smp-lts-xenial (Ubuntu package)
linux-image-powerpc64-emb-lts-xenial (Ubuntu package)
linux-image-virtual-lts-xenial (Ubuntu package)
linux-image-4.4.0-200-generic-lpae (Ubuntu package)
linux-image-4.4.0-200-powerpc64-smp (Ubuntu package)
linux-image-4.4.0-200-generic (Ubuntu package)
linux-image-4.4.0-200-lowlatency (Ubuntu package)
linux-image-4.4.0-200-powerpc-e500mc (Ubuntu package)
linux-image-4.4.0-200-powerpc-smp (Ubuntu package)
linux-image-4.4.0-200-powerpc64-emb (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-4.4.0-1085-aws (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.4.0-1087-kvm (Ubuntu package)
linux-image-4.4.0-1121-aws (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.4.0-1145-raspi2 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.4.0-1149-snapdragon (Ubuntu package)
kernel-default-man
kernel-default-base
kernel-default
kernel-default-base-debuginfo
kernel-default-debuginfo
kernel-default-debugsource
kernel-default-devel
kernel-syms
kernel-devel
kernel-macros
kernel-source
cluster-md-kmp-default
cluster-network-kmp-default
cluster-md-kmp-default-debuginfo
ocfs2-kmp-default-debuginfo
ocfs2-kmp-default
gfs2-kmp-default-debuginfo
gfs2-kmp-default
dlm-kmp-default
cluster-network-kmp-default-debuginfo
dlm-kmp-default-debuginfo
kernel-default-kgraft
kernel
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-generic-lpae-hwe-16.04 (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-4.15.0-132-generic (Ubuntu package)
linux-image-4.15.0-132-lowlatency (Ubuntu package)
linux-image-4.15.0-132-generic-lpae (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-4.15.0-1064-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-gke-4.15 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-4.15.0-1078-gke (Ubuntu package)
linux-image-4.15.0-1078-raspi2 (Ubuntu package)
linux-image-4.15.0-1084-kvm (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-4.15.0-1092-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1093-aws (Ubuntu package)
linux-image-4.15.0-1095-snapdragon (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1106-azure (Ubuntu package)
kernel-modules
kernel-doc
kernel-abi-whitelists
python3-perf
perf
kernel-tools-libs
kernel-tools
kernel-modules-extra
bpftool
kernel-headers
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
kernel-debug
kernel-cross-headers
kernel-core
bpftool-debuginfo
kernel-tools-devel
kernel-tools-debuginfo
python2-perf-debuginfo
kernel-debugsource
kernel-debuginfo
python2-perf
python3-perf-debuginfo
perf-debuginfo
python-perf
kernel-tools-libs-devel
linux-image-gke-5.0 (Ubuntu package)
linux-image-5.0.0-1051-gke (Ubuntu package)
linux-image-5.3.0-70-generic (Ubuntu package)
linux-image-5.3.0-70-lowlatency (Ubuntu package)
linux-image-gkeop-5.3 (Ubuntu package)
linux-image-raspi2-hwe-18.04 (Ubuntu package)
linux-image-5.3.0-1037-raspi2 (Ubuntu package)
linux-image-gke-5.3 (Ubuntu package)
linux-image-5.3.0-1040-gke (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.4.0-62-generic (Ubuntu package)
linux-image-5.4.0-62-generic-lpae (Ubuntu package)
linux-image-5.4.0-62-lowlatency (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1009-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1028-raspi (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1032-kvm (Ubuntu package)
linux-image-5.4.0-1035-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-5.4.0-1036-gcp (Ubuntu package)
linux-image-5.4.0-1037-aws (Ubuntu package)
linux-image-5.4.0-1037-oracle (Ubuntu package)
linux-image-5.4.0-1039-azure (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-5.8.0-38-lowlatency (Ubuntu package)
linux-image-5.8.0-38-generic (Ubuntu package)
linux-image-5.8.0-38-generic-lpae (Ubuntu package)
linux-image-5.8.0-38-generic-64k (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-5.8.0-1013-raspi (Ubuntu package)
linux-image-5.8.0-1013-raspi-nolpae (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1016-kvm (Ubuntu package)
linux-image-5.8.0-1018-oracle (Ubuntu package)
linux-image-5.8.0-1020-gcp (Ubuntu package)
linux-image-5.8.0-1020-azure (Ubuntu package)
linux-image-5.8.0-1021-aws (Ubuntu package)
linux-image-5.10.0-1014-oem (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
kernel-livepatch-5_3_18-24_15-default-debuginfo
kernel-livepatch-5_3_18-24_15-default
kgraft-patch-4_12_14-95_60-default
kgraft-patch-4_4_121-92_141-default
kernel-livepatch-4_12_14-150_58-default
kernel-livepatch-4_12_14-150_58-default-debuginfo
kernel-livepatch-SLE15-SP2_Update_4-debugsource
kernel-livepatch-SLE15-SP2_Update_3-debugsource
kernel-livepatch-SLE15-SP2_Update_2-debugsource
kernel-livepatch-5_3_18-24_12-default
kernel-livepatch-5_3_18-24_12-default-debuginfo
kernel-livepatch-5_3_18-24_24-default-debuginfo
kgraft-patch-4_4_180-94_130-default
kgraft-patch-4_4_180-94_130-default-debuginfo
kernel-livepatch-5_3_18-24_24-default
kernel-livepatch-5_3_18-24_9-default
kernel-livepatch-5_3_18-24_9-default-debuginfo
kernel-livepatch-SLE15-SP2_Update_1-debugsource
kgraft-patch-4_12_14-95_54-default
kgraft-patch-4_12_14-95_57-default
kernel-livepatch-4_12_14-150_52-default-debuginfo
kgraft-patch-4_4_121-92_135-default
kgraft-patch-4_4_180-94_127-default-debuginfo
kernel-livepatch-4_12_14-150_52-default
kernel-livepatch-4_12_14-150_55-default
kernel-livepatch-4_12_14-150_55-default-debuginfo
kgraft-patch-4_4_121-92_138-default
kgraft-patch-4_4_180-94_127-default
kgraft-patch-4_4_180-94_124-default-debuginfo
kgraft-patch-4_4_180-94_121-default
kgraft-patch-4_4_180-94_121-default-debuginfo
kgraft-patch-4_4_180-94_124-default
kgraft-patch-4_4_180-94_116-default-debuginfo
kgraft-patch-4_4_180-94_116-default
kgraft-patch-4_12_14-95_51-default
kgraft-patch-4_4_121-92_129-default
kgraft-patch-4_12_14-95_48-default
Red Hat Advanced Cluster Management for Kubernetes
Session Smart Router
IBM Security Guardium
Data Computing Appliance (DCA)
Juniper Junos Space

How to mitigate CVE-2020-28374

Install update from vendor's website.

Linux kernel - update to 5.10.7
kpatch-patch-3_10_0-1062_45_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-957_54_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-1062_43_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-1062_40_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-1062_37_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-1062_36_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-1062_33_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-1062_31_3 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-1062_31_2 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-1062_30_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-1062_26_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-957_66_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-957_65_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-957_62_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-957_61_2 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-957_61_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-957_58_2 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-957_56_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-4_18_0-147_43_1 (Red Hat package) - update to 1-4.el8_1
kpatch-patch-4_18_0-147_38_1 (Red Hat package) - update to 1-6.el8_1
kpatch-patch-4_18_0-193_40_1 (Red Hat package) - update to 1-7.el8_2
kpatch-patch-4_18_0-193_37_1 (Red Hat package) - update to 1-7.el8_2
kpatch-patch-4_18_0-193_29_1 (Red Hat package) - update to 1-7.el8_2
kpatch-patch-4_18_0-193_47_1 (Red Hat package) - update to 1-4.el8_2
kpatch-patch-4_18_0-193_41_1 (Red Hat package) - update to 1-7.el8_2
kpatch-patch-4_18_0-193_46_1 (Red Hat package) - update to 1-4.el8_2
kpatch-patch-4_18_0-193_28_1 (Red Hat package) - update to 1-7.el8_2
kpatch-patch-4_18_0-147_34_1 (Red Hat package) - update to 1-7.el8_1
kpatch-patch-4_18_0-147_32_1 (Red Hat package) - update to 1-7.el8_1
kpatch-patch-4_18_0-193_14_3 (Red Hat package) - update to 1-9.el8_2
kpatch-patch-4_18_0-193_19_1 (Red Hat package) - update to 1-9.el8_2
kpatch-patch-4_18_0-193_13_2 (Red Hat package) - update to 1-9.el8_2
kpatch-patch-4_18_0-147_24_2 (Red Hat package) - update to 1-9.el8_1
kpatch-patch-4_18_0-147_27_1 (Red Hat package) - update to 1-9.el8_1
kpatch-patch-4_18_0-193_6_3 (Red Hat package) - update to 1-11.el8_2
kpatch-patch-4_18_0-147_20_1 (Red Hat package) - update to 1-11.el8_1
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.0.10, 2.1.6, 2.2.2
kernel (Red Hat package) - addressed in versions 3.10.0-693.90.2.el7, 3.10.0-957.72.1.el7, 3.10.0-1062.49.1.el7, 3.10.0-1160.21.1.el7, 4.18.0-147.48.1.el8_1, 4.18.0-193.56.1.el8_2, 4.18.0-240.22.1.el8_3
kernel-rt (Red Hat package) - addressed in versions 3.10.0-1160.21.1.rt56.1158.el7, 4.18.0-193.56.1.rt13.106.el8_2, 4.18.0-240.22.1.rt7.77.el8_3
kpatch-patch-4_18_0-193_51_1 (Red Hat package) - update to 1-1.el8_2
kpatch-patch-3_10_0-1160_11_1 (Red Hat package) - update to 1-2.el7
kpatch-patch-3_10_0-1160_15_2 (Red Hat package) - update to 1-2.el7
kpatch-patch-3_10_0-957_70_1 (Red Hat package) - update to 1-2.el7
kpatch-patch-3_10_0-1062_46_1 (Red Hat package) - update to 1-2.el7
kpatch-patch-3_10_0-1160_6_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-1160_2_2 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-1160_2_1 (Red Hat package) - update to 1-3.el7
kpatch-patch-3_10_0-1160 (Red Hat package) - update to 1-3.el7
kpatch-patch-4_18_0-147_44_1 (Red Hat package) - update to 1-3.el8_1
kgraft-patch-4_4_121-92_152-default - update to 1-3.3.2
kgraft-patch-4_4_180-94_141-default-debuginfo - update to 1-4.3.2
kgraft-patch-4_4_180-94_141-default - update to 1-4.3.2
tcmu-runner - update to 1.5.2-7.fc33
kgraft-patch-4_4_121-92_149-default - update to 2-2.2
kgraft-patch-4_4_180-94_138-default-debuginfo - update to 2-2.2
kgraft-patch-4_4_180-94_138-default - update to 2-2.2
kernel-livepatch-SLE15-SP2_Update_8-debugsource - update to 3-2.2
kernel-livepatch-5_3_18-24_43-default-debuginfo - update to 3-2.2
kernel-livepatch-5_3_18-24_43-default - update to 3-2.2
kgraft-patch-4_12_14-95_65-default - update to 3-2.2
linux-image-highbank (Ubuntu package) - update to 3.13.0.184.193
linux-image-powerpc-smp (Ubuntu package) - addressed in versions 3.13.0.184.193, 4.4.0.200.206
linux-image-powerpc64-emb (Ubuntu package) - addressed in versions 3.13.0.184.193, 4.4.0.200.206
linux-image-powerpc64-smp (Ubuntu package) - addressed in versions 3.13.0.184.193, 4.4.0.200.206
linux-image-server (Ubuntu package) - update to 3.13.0.184.193
linux-image-virtual (Ubuntu package) - addressed in versions 3.13.0.184.193, 4.4.0.200.206, 4.15.0.132.119, 5.4.0.62.65, 5.8.0.38.42
linux-image-powerpc-e500mc (Ubuntu package) - addressed in versions 3.13.0.184.193, 4.4.0.200.206
linux-image-powerpc-e500 (Ubuntu package) - update to 3.13.0.184.193
linux-image-omap (Ubuntu package) - update to 3.13.0.184.193
linux-image-lowlatency-pae (Ubuntu package) - update to 3.13.0.184.193
linux-image-lowlatency (Ubuntu package) - addressed in versions 3.13.0.184.193, 4.4.0.200.206, 4.15.0.132.119, 5.4.0.62.65, 5.8.0.38.42
linux-image-generic-pae (Ubuntu package) - update to 3.13.0.184.193
linux-image-generic-lpae (Ubuntu package) - addressed in versions 3.13.0.184.193, 4.4.0.200.206, 4.15.0.132.119, 5.4.0.62.65, 5.8.0.38.42
linux-image-generic (Ubuntu package) - addressed in versions 3.13.0.184.193, 4.4.0.200.206, 4.15.0.132.119, 5.4.0.62.65, 5.8.0.38.42
linux-image-3.13.0-184-lowlatency (Ubuntu package) - update to 3.13.0-184.235
linux-image-3.13.0-184-powerpc64-smp (Ubuntu package) - update to 3.13.0-184.235
linux-image-3.13.0-184-powerpc64-emb (Ubuntu package) - update to 3.13.0-184.235
linux-image-3.13.0-184-powerpc-smp (Ubuntu package) - update to 3.13.0-184.235
linux-image-3.13.0-184-powerpc-e500mc (Ubuntu package) - update to 3.13.0-184.235
linux-image-3.13.0-184-powerpc-e500 (Ubuntu package) - update to 3.13.0-184.235
linux-image-3.13.0-184-generic (Ubuntu package) - update to 3.13.0-184.235
linux-image-3.13.0-184-generic-lpae (Ubuntu package) - update to 3.13.0-184.235
linux-image-generic-lts-trusty (Ubuntu package) - update to 3.13.0.185.170
linux-image-3.13.0-185-generic (Ubuntu package) - update to 3.13.0-185.236~12.04.1
kernel-livepatch-SLE15-SP2_Update_7-debugsource - update to 4-2.2
kernel-livepatch-5_3_18-24_29-default - update to 4-2.2
kernel-livepatch-5_3_18-24_29-default-debuginfo - update to 4-2.2
kgraft-patch-4_4_121-92_146-default - update to 4-2.2
kgraft-patch-4_4_180-94_135-default-debuginfo - update to 4-2.2
kgraft-patch-4_4_180-94_135-default - update to 4-2.2
kernel-livepatch-5_3_18-24_34-default - update to 4-2.2
kernel-livepatch-5_3_18-24_34-default-debuginfo - update to 4-2.2
kernel-livepatch-5_3_18-24_37-default - update to 4-2.2
kernel-livepatch-4_12_14-150_63-default-debuginfo - update to 4-2.2
kernel-livepatch-4_12_14-150_63-default - update to 4-2.2
kernel-livepatch-5_3_18-24_37-default-debuginfo - update to 4-2.2
kernel-livepatch-SLE15-SP2_Update_5-debugsource - update to 4-2.2
kernel-livepatch-SLE15-SP2_Update_6-debugsource - update to 4-2.2
Data Computing Appliance (DCA) - update to 4.3.0.0
linux-image-powerpc64-smp-lts-xenial (Ubuntu package) - update to 4.4.0.200.175
linux-image-generic-lpae-lts-xenial (Ubuntu package) - update to 4.4.0.200.175
linux-image-generic-lts-xenial (Ubuntu package) - update to 4.4.0.200.175
linux-image-lowlatency-lts-xenial (Ubuntu package) - update to 4.4.0.200.175
linux-image-powerpc-e500mc-lts-xenial (Ubuntu package) - update to 4.4.0.200.175
linux-image-powerpc-smp-lts-xenial (Ubuntu package) - update to 4.4.0.200.175
linux-image-powerpc64-emb-lts-xenial (Ubuntu package) - update to 4.4.0.200.175
linux-image-virtual-lts-xenial (Ubuntu package) - update to 4.4.0.200.175
linux-image-4.4.0-200-generic-lpae (Ubuntu package) - addressed in versions 4.4.0-200.232, 4.4.0-200.232~14.04.1
linux-image-4.4.0-200-powerpc64-smp (Ubuntu package) - addressed in versions 4.4.0-200.232, 4.4.0-200.232~14.04.1
linux-image-4.4.0-200-generic (Ubuntu package) - addressed in versions 4.4.0-200.232, 4.4.0-200.232~14.04.1
linux-image-4.4.0-200-lowlatency (Ubuntu package) - addressed in versions 4.4.0-200.232, 4.4.0-200.232~14.04.1
linux-image-4.4.0-200-powerpc-e500mc (Ubuntu package) - addressed in versions 4.4.0-200.232, 4.4.0-200.232~14.04.1
linux-image-4.4.0-200-powerpc-smp (Ubuntu package) - addressed in versions 4.4.0-200.232, 4.4.0-200.232~14.04.1
linux-image-4.4.0-200-powerpc64-emb (Ubuntu package) - addressed in versions 4.4.0-200.232, 4.4.0-200.232~14.04.1
linux-image-aws (Ubuntu package) - addressed in versions 4.4.0.1085.82, 4.4.0.1121.126, 5.4.0.1037.21, 5.4.0.1037.38, 5.8.0.1021.23
linux-image-4.4.0-1085-aws (Ubuntu package) - update to 4.4.0-1085.89
linux-image-kvm (Ubuntu package) - addressed in versions 4.4.0.1087.85, 4.15.0.1084.80, 5.4.0.1032.30, 5.8.0.1016.18
linux-image-4.4.0-1087-kvm (Ubuntu package) - update to 4.4.0-1087.96
linux-image-4.4.0-1121-aws (Ubuntu package) - update to 4.4.0-1121.135
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.4.0.1145.145, 4.15.0.1078.75, 5.4.0.1028.63
linux-image-4.4.0-1145-raspi2 (Ubuntu package) - update to 4.4.0-1145.155
linux-image-snapdragon (Ubuntu package) - addressed in versions 4.4.0.1149.141, 4.15.0.1095.98
linux-image-4.4.0-1149-snapdragon (Ubuntu package) - update to 4.4.0-1149.159
kernel-default-man - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
kernel-default-base - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
kernel-default - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
kernel-default-base-debuginfo - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
kernel-default-debuginfo - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
kernel-default-debugsource - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
kernel-default-devel - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
kernel-syms - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
kernel-devel - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
kernel-macros - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
kernel-source - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
cluster-md-kmp-default - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
cluster-network-kmp-default - update to 4.4.121-92.152.2
cluster-md-kmp-default-debuginfo - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
ocfs2-kmp-default-debuginfo - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
ocfs2-kmp-default - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
gfs2-kmp-default-debuginfo - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
gfs2-kmp-default - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
dlm-kmp-default - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
cluster-network-kmp-default-debuginfo - update to 4.4.121-92.152.2
dlm-kmp-default-debuginfo - addressed in versions 4.4.121-92.152.2, 4.4.180-94.141.2
kernel-default-kgraft - update to 4.4.180-94.141.2
kernel - update to 4.14.219-119.340
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to 4.15.0.132.130
linux-image-generic-lpae-hwe-16.04 (Ubuntu package) - update to 4.15.0.132.130
linux-image-generic-hwe-16.04 (Ubuntu package) - update to 4.15.0.132.130
linux-image-oem (Ubuntu package) - addressed in versions 4.15.0.132.130, 5.4.0.62.65, 5.4.0.62.70~18.04.57
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to 4.15.0.132.130
linux-image-4.15.0-132-generic (Ubuntu package) - addressed in versions 4.15.0-132.136, 4.15.0-132.136~16.04.1
linux-image-4.15.0-132-lowlatency (Ubuntu package) - addressed in versions 4.15.0-132.136, 4.15.0-132.136~16.04.1
linux-image-4.15.0-132-generic-lpae (Ubuntu package) - addressed in versions 4.15.0-132.136, 4.15.0-132.136~16.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 4.15.0.1064.52, 5.4.0.1037.34, 5.4.0.1037.40~18.04.20, 5.8.0.1018.18
linux-image-4.15.0-1064-oracle (Ubuntu package) - addressed in versions 4.15.0-1064.71, 4.15.0-1064.71~16.04.1
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1064.74
linux-image-gke-4.15 (Ubuntu package) - update to 4.15.0.1078.82
linux-image-gke (Ubuntu package) - addressed in versions 4.15.0.1078.82, 4.15.0.1092.93, 5.8.0.1020.20
linux-image-4.15.0-1078-gke (Ubuntu package) - update to 4.15.0-1078.83
linux-image-4.15.0-1078-raspi2 (Ubuntu package) - update to 4.15.0-1078.83
linux-image-4.15.0-1084-kvm (Ubuntu package) - update to 4.15.0-1084.86
linux-image-gcp (Ubuntu package) - addressed in versions 4.15.0.1092.93, 5.4.0.1036.23, 5.4.0.1036.45, 5.8.0.1020.20
linux-image-4.15.0-1092-gcp (Ubuntu package) - addressed in versions 4.15.0-1092.105, 4.15.0-1092.105~16.04.1
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1092.110
linux-image-aws-hwe (Ubuntu package) - update to 4.15.0.1093.86
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1093.96
linux-image-4.15.0-1093-aws (Ubuntu package) - addressed in versions 4.15.0-1093.99, 4.15.0-1093.99~16.04.1
linux-image-4.15.0-1095-snapdragon (Ubuntu package) - update to 4.15.0-1095.104
linux-image-azure (Ubuntu package) - addressed in versions 4.15.0.1106.79, 4.15.0.1106.97, 5.4.0.1039.19, 5.4.0.1039.37, 5.8.0.1020.20
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1106.79
linux-image-4.15.0-1106-azure (Ubuntu package) - addressed in versions 4.15.0-1106.118, 4.15.0-1106.118~14.04.1, 4.15.0-1106.118~16.04.1
kernel-modules - update to 4.18.0-193.56.1
kernel-doc - update to 4.18.0-193.56.1
kernel-abi-whitelists - update to 4.18.0-193.56.1
python3-perf - update to 4.18.0-193.56.1
perf - addressed in versions 4.18.0-193.56.1, 4.19.91-26
kernel-tools-libs - addressed in versions 4.18.0-193.56.1, 4.19.91-26
kernel-tools - addressed in versions 4.18.0-193.56.1, 4.19.91-26
kernel-modules-extra - update to 4.18.0-193.56.1
kernel - addressed in versions 4.18.0-193.56.1, 4.19.91-26
bpftool - addressed in versions 4.18.0-193.56.1, 4.19.91-26
kernel-headers - addressed in versions 4.18.0-193.56.1, 4.19.91-26
kernel-devel - addressed in versions 4.18.0-193.56.1, 4.19.91-26
kernel-debug-modules-extra - update to 4.18.0-193.56.1
kernel-debug-modules - update to 4.18.0-193.56.1
kernel-debug-devel - addressed in versions 4.18.0-193.56.1, 4.19.91-26
kernel-debug-core - update to 4.18.0-193.56.1
kernel-debug - addressed in versions 4.18.0-193.56.1, 4.19.91-26
kernel-cross-headers - update to 4.18.0-193.56.1
kernel-core - update to 4.18.0-193.56.1
bpftool-debuginfo - update to 4.19.90-2102.2.0.0057
kernel-tools-devel - update to 4.19.90-2102.2.0.0057
kernel-devel - update to 4.19.90-2102.2.0.0057
kernel-tools-debuginfo - update to 4.19.90-2102.2.0.0057
python2-perf-debuginfo - update to 4.19.90-2102.2.0.0057
kernel-source - update to 4.19.90-2102.2.0.0057
perf - update to 4.19.90-2102.2.0.0057
kernel - update to 4.19.90-2102.2.0.0057
bpftool - update to 4.19.90-2102.2.0.0057
kernel-debugsource - update to 4.19.90-2102.2.0.0057
kernel-tools - update to 4.19.90-2102.2.0.0057
kernel-debuginfo - update to 4.19.90-2102.2.0.0057
python3-perf - update to 4.19.90-2102.2.0.0057
python2-perf - update to 4.19.90-2102.2.0.0057
python3-perf-debuginfo - update to 4.19.90-2102.2.0.0057
perf-debuginfo - update to 4.19.90-2102.2.0.0057
python-perf - update to 4.19.91-26
kernel-tools-libs-devel - update to 4.19.91-26
linux-image-gke-5.0 (Ubuntu package) - update to 5.0.0.1051.35
linux-image-5.0.0-1051-gke (Ubuntu package) - update to 5.0.0-1051.53
linux-image-5.3.0-70-generic (Ubuntu package) - update to 5.3.0-70.66
linux-image-5.3.0-70-lowlatency (Ubuntu package) - update to 5.3.0-70.66
linux-image-gkeop-5.3 (Ubuntu package) - update to 5.3.0.70.127
linux-image-raspi2-hwe-18.04 (Ubuntu package) - update to 5.3.0.1037.26
linux-image-5.3.0-1037-raspi2 (Ubuntu package) - update to 5.3.0-1037.39
linux-image-gke-5.3 (Ubuntu package) - update to 5.3.0.1040.23
linux-image-5.3.0-1040-gke (Ubuntu package) - update to 5.3.0-1040.43
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.62.65, 5.4.0.62.70~18.04.57
linux-image-5.4.0-62-generic (Ubuntu package) - addressed in versions 5.4.0-62.70, 5.4.0-62.70~18.04.1
linux-image-5.4.0-62-generic-lpae (Ubuntu package) - addressed in versions 5.4.0-62.70, 5.4.0-62.70~18.04.1
linux-image-5.4.0-62-lowlatency (Ubuntu package) - addressed in versions 5.4.0-62.70, 5.4.0-62.70~18.04.1
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.62.70~18.04.57
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.62.70~18.04.57
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.62.70~18.04.57
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.62.70~18.04.57
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.62.70~18.04.57
linux-image-5.4.0-1009-gkeop (Ubuntu package) - update to 5.4.0-1009.10~18.04.1
linux-image-gkeop-5.4 (Ubuntu package) - update to 5.4.0.1009.10~18.04.10
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1028.31
linux-image-5.4.0-1028-raspi (Ubuntu package) - addressed in versions 5.4.0-1028.31, 5.4.0-1028.31~18.04.1
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1028.63, 5.8.0.1013.16
linux-image-5.4.0-1032-kvm (Ubuntu package) - update to 5.4.0-1032.33
linux-image-5.4.0-1035-gke (Ubuntu package) - update to 5.4.0-1035.37~18.04.1
linux-image-gke-5.4 (Ubuntu package) - update to 5.4.0.1035.37~18.04.3
linux-image-5.4.0-1036-gcp (Ubuntu package) - addressed in versions 5.4.0-1036.39, 5.4.0-1036.39~18.04.1
linux-image-5.4.0-1037-aws (Ubuntu package) - addressed in versions 5.4.0-1037.39, 5.4.0-1037.39~18.04.1
linux-image-5.4.0-1037-oracle (Ubuntu package) - addressed in versions 5.4.0-1037.40, 5.4.0-1037.40~18.04.1
linux-image-5.4.0-1039-azure (Ubuntu package) - addressed in versions 5.4.0-1039.41, 5.4.0-1039.41~18.04.1
Session Smart Router - addressed in versions 5.4.7, 5.5.3
linux-image-generic-64k (Ubuntu package) - update to 5.8.0.38.42
linux-image-5.8.0-38-lowlatency (Ubuntu package) - addressed in versions 5.8.0-38.43, 5.8.0-38.43~20.04.1
linux-image-5.8.0-38-generic (Ubuntu package) - addressed in versions 5.8.0-38.43, 5.8.0-38.43~20.04.1
linux-image-5.8.0-38-generic-lpae (Ubuntu package) - addressed in versions 5.8.0-38.43, 5.8.0-38.43~20.04.1
linux-image-5.8.0-38-generic-64k (Ubuntu package) - update to 5.8.0-38.43
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.8.0.38.43~20.04.23
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.8.0.38.43~20.04.23
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.8.0.38.43~20.04.23
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.8.0.38.43~20.04.23
linux-image-5.8.0-1013-raspi (Ubuntu package) - update to 5.8.0-1013.16
linux-image-5.8.0-1013-raspi-nolpae (Ubuntu package) - update to 5.8.0-1013.16
linux-image-raspi-nolpae (Ubuntu package) - update to 5.8.0.1013.16
linux-image-5.8.0-1016-kvm (Ubuntu package) - update to 5.8.0-1016.18
linux-image-5.8.0-1018-oracle (Ubuntu package) - update to 5.8.0-1018.19
linux-image-5.8.0-1020-gcp (Ubuntu package) - update to 5.8.0-1020.21
linux-image-5.8.0-1020-azure (Ubuntu package) - update to 5.8.0-1020.22
linux-image-5.8.0-1021-aws (Ubuntu package) - update to 5.8.0-1021.23
linux-image-5.10.0-1014-oem (Ubuntu package) - update to 5.10.0-1014.15
linux-image-oem-20.04b (Ubuntu package) - update to 5.10.0.1014.15
kernel - addressed in versions 5.10.7-100.fc32, 5.10.7-200.fc33
kernel-headers - addressed in versions 5.10.7-100.fc32, 5.10.7-200.fc33
kernel-livepatch-5_3_18-24_15-default-debuginfo - update to 6-2.2
kernel-livepatch-5_3_18-24_15-default - update to 6-2.2
kgraft-patch-4_12_14-95_60-default - update to 6-2.2
kgraft-patch-4_4_121-92_141-default - update to 6-2.2
kernel-livepatch-4_12_14-150_58-default - update to 6-2.2
kernel-livepatch-4_12_14-150_58-default-debuginfo - update to 6-2.2
kernel-livepatch-SLE15-SP2_Update_4-debugsource - update to 6-2.2
kernel-livepatch-SLE15-SP2_Update_3-debugsource - update to 6-2.2
kernel-livepatch-SLE15-SP2_Update_2-debugsource - update to 6-2.2
kernel-livepatch-5_3_18-24_12-default - update to 6-2.2
kernel-livepatch-5_3_18-24_12-default-debuginfo - update to 6-2.2
kernel-livepatch-5_3_18-24_24-default-debuginfo - update to 6-2.2
kgraft-patch-4_4_180-94_130-default - update to 6-2.2
kgraft-patch-4_4_180-94_130-default-debuginfo - update to 6-2.2
kernel-livepatch-5_3_18-24_24-default - update to 6-2.2
kernel-livepatch-5_3_18-24_9-default - update to 7-2.2
kernel-livepatch-5_3_18-24_9-default-debuginfo - update to 7-2.2
kernel-livepatch-SLE15-SP2_Update_1-debugsource - update to 7-2.2
kgraft-patch-4_12_14-95_54-default - update to 7-2.2
kgraft-patch-4_12_14-95_57-default - update to 7-2.2
kernel-livepatch-4_12_14-150_52-default-debuginfo - update to 7-2.2
kgraft-patch-4_4_121-92_135-default - update to 7-2.2
kgraft-patch-4_4_180-94_127-default-debuginfo - update to 7-2.2
kernel-livepatch-4_12_14-150_52-default - update to 7-2.2
kernel-livepatch-4_12_14-150_55-default - update to 7-2.2
kernel-livepatch-4_12_14-150_55-default-debuginfo - update to 7-2.2
kgraft-patch-4_4_121-92_138-default - update to 7-2.2
kgraft-patch-4_4_180-94_127-default - update to 7-2.2
kgraft-patch-4_4_180-94_124-default-debuginfo - update to 7-2.2
kgraft-patch-4_4_180-94_121-default - update to 7-2.2
kgraft-patch-4_4_180-94_121-default-debuginfo - update to 7-2.2
kgraft-patch-4_4_180-94_124-default - update to 7-2.2
kgraft-patch-4_4_180-94_116-default-debuginfo - update to 8-2.2
kgraft-patch-4_4_180-94_116-default - update to 8-2.2
kgraft-patch-4_12_14-95_51-default - update to 9-2.2
kgraft-patch-4_4_121-92_129-default - update to 9-2.2
kgraft-patch-4_12_14-95_48-default - update to 10-2.2
Juniper Junos Space - update to 21.2R1

External References

Related Security Bulletins