Cleartext transmission of sensitive information in Linux kernel - CVE-2020-25645

 

Cleartext transmission of sensitive information in Linux kernel - CVE-2020-25645

Published: March 17, 2021


Vulnerability identifier: #VU51546
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-25645
CWE-ID: CWE-319
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to traffic passed between two Geneve endpoints with configured IPsec can be unencrypted for the specific UDP port. A remote attacker with ability to intercept network traffic can gain access to sensitive data.


Affected software

Linux kernel
Debian Linux
Anolis OS
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux Desktop
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
Ubuntu
openEuler
kernel (Red Hat package)
kernel-rt (Red Hat package)
kgraft-patch-4_4_121-92_149-default
kgraft-patch-4_4_180-94_141-default
kgraft-patch-4_4_180-94_141-default-debuginfo
kgraft-patch-4_4_180-94_138-default-debuginfo
kgraft-patch-4_4_180-94_138-default
linux-image-powerpc64-emb-lts-xenial (Ubuntu package)
linux-image-powerpc64-smp-lts-xenial (Ubuntu package)
linux-image-virtual-lts-xenial (Ubuntu package)
linux-image-powerpc-smp-lts-xenial (Ubuntu package)
linux-image-powerpc-e500mc-lts-xenial (Ubuntu package)
linux-image-lowlatency-lts-xenial (Ubuntu package)
linux-image-generic-lts-xenial (Ubuntu package)
linux-image-generic-lpae-lts-xenial (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-powerpc-e500mc (Ubuntu package)
linux-image-powerpc-smp (Ubuntu package)
linux-image-powerpc64-emb (Ubuntu package)
linux-image-powerpc64-smp (Ubuntu package)
linux-image-4.4.0-197-powerpc64-smp (Ubuntu package)
linux-image-4.4.0-197-powerpc64-emb (Ubuntu package)
linux-image-4.4.0-197-generic (Ubuntu package)
linux-image-4.4.0-197-powerpc-smp (Ubuntu package)
linux-image-4.4.0-197-generic-lpae (Ubuntu package)
linux-image-4.4.0-197-lowlatency (Ubuntu package)
linux-image-4.4.0-197-powerpc-e500mc (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-4.4.0-1082-aws (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.4.0-1084-kvm (Ubuntu package)
linux-image-4.4.0-1118-aws (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.4.0-1142-raspi2 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.4.0-1146-snapdragon (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-generic-lpae-hwe-16.04 (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-4.15.0-126-lowlatency (Ubuntu package)
linux-image-4.15.0-126-generic (Ubuntu package)
linux-image-4.15.0-126-generic-lpae (Ubuntu package)
linux-image-4.15.0-128-lowlatency (Ubuntu package)
linux-image-4.15.0-128-generic-lpae (Ubuntu package)
linux-image-4.15.0-128-generic (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-4.15.0-1059-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1061-oracle (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gke-4.15 (Ubuntu package)
linux-image-4.15.0-1074-raspi2 (Ubuntu package)
linux-image-4.15.0-1074-gke (Ubuntu package)
linux-image-4.15.0-1076-gke (Ubuntu package)
linux-image-4.15.0-1079-kvm (Ubuntu package)
linux-image-4.15.0-1081-kvm (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1088-aws (Ubuntu package)
linux-image-4.15.0-1088-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1090-aws (Ubuntu package)
linux-image-4.15.0-1090-gcp (Ubuntu package)
linux-image-4.15.0-1091-snapdragon (Ubuntu package)
linux-image-4.15.0-1093-snapdragon (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-edge (Ubuntu package)
linux-image-4.15.0-1100-azure (Ubuntu package)
linux-image-4.15.0-1102-azure (Ubuntu package)
linux-image-4.15.0-1103-oem (Ubuntu package)
perf
kernel-source
python2-perf-debuginfo
kernel-tools-debuginfo
kernel-devel
kernel-tools-devel
bpftool-debuginfo
python3-perf
python2-perf
python3-perf-debuginfo
perf-debuginfo
kernel-debuginfo
kernel-tools
kernel-debugsource
bpftool
kernel
python-perf
kernel-tools-libs-devel
kernel-tools-libs
kernel-headers
kernel-debug-devel
kernel-debug
linux (Debian package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-5.4.0-56-lowlatency (Ubuntu package)
linux-image-5.4.0-56-generic (Ubuntu package)
linux-image-5.4.0-56-generic-lpae (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-58-lowlatency (Ubuntu package)
linux-image-5.4.0-58-generic-lpae (Ubuntu package)
linux-image-5.4.0-58-generic (Ubuntu package)
linux-image-5.4.0-1023-raspi (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1025-raspi (Ubuntu package)
linux-image-5.4.0-1028-kvm (Ubuntu package)
linux-image-5.4.0-1030-kvm (Ubuntu package)
linux-image-5.4.0-1030-aws (Ubuntu package)
linux-image-5.4.0-1030-oracle (Ubuntu package)
linux-image-5.4.0-1030-gcp (Ubuntu package)
linux-image-5.4.0-1032-aws (Ubuntu package)
linux-image-5.4.0-1032-azure (Ubuntu package)
linux-image-5.4.0-1032-oracle (Ubuntu package)
linux-image-5.4.0-1032-gcp (Ubuntu package)
linux-image-5.4.0-1033-oracle (Ubuntu package)
linux-image-5.4.0-1034-azure (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-5.6.0-1053-oem (Ubuntu package)
Data Computing Appliance (DCA)
Session Smart Router
Juniper Junos Space

How to mitigate CVE-2020-25645

Install updates from vendor's website.

Linux kernel - update to 5.9 rc7
kernel (Red Hat package) - update to 3.10.0-1160.21.1.el7
kernel-rt (Red Hat package) - update to 3.10.0-1160.21.1.rt56.1158.el7
kgraft-patch-4_4_121-92_149-default - update to 2-2.2
kgraft-patch-4_4_180-94_141-default - update to 2-2.2
kgraft-patch-4_4_180-94_141-default-debuginfo - update to 2-2.2
kgraft-patch-4_4_180-94_138-default-debuginfo - update to 2-2.2
kgraft-patch-4_4_180-94_138-default - update to 2-2.2
Data Computing Appliance (DCA) - update to 4.3.0.0
linux-image-powerpc64-emb-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-powerpc64-smp-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-virtual-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-powerpc-smp-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-powerpc-e500mc-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-lowlatency-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-generic-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-generic-lpae-lts-xenial (Ubuntu package) - update to 4.4.0.197.172
linux-image-virtual (Ubuntu package) - addressed in versions 4.4.0.197.203, 4.15.0.126.113, 4.15.0.128.115, 5.4.0.56.59, 5.4.0.58.61
linux-image-generic (Ubuntu package) - addressed in versions 4.4.0.197.203, 4.15.0.126.113, 4.15.0.128.115, 5.4.0.56.59, 5.4.0.58.61
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.4.0.197.203, 4.15.0.126.113, 4.15.0.128.115, 5.4.0.56.59, 5.4.0.58.61
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.4.0.197.203, 4.15.0.126.113, 4.15.0.128.115, 5.4.0.56.59, 5.4.0.58.61
linux-image-powerpc-e500mc (Ubuntu package) - update to 4.4.0.197.203
linux-image-powerpc-smp (Ubuntu package) - update to 4.4.0.197.203
linux-image-powerpc64-emb (Ubuntu package) - update to 4.4.0.197.203
linux-image-powerpc64-smp (Ubuntu package) - update to 4.4.0.197.203
linux-image-4.4.0-197-powerpc64-smp (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-4.4.0-197-powerpc64-emb (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-4.4.0-197-generic (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-4.4.0-197-powerpc-smp (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-4.4.0-197-generic-lpae (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-4.4.0-197-lowlatency (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-4.4.0-197-powerpc-e500mc (Ubuntu package) - addressed in versions 4.4.0-197.229, 4.4.0-197.229~14.04.1
linux-image-aws (Ubuntu package) - addressed in versions 4.4.0.1082.79, 4.4.0.1118.123, 5.4.0.1030.15, 5.4.0.1030.31, 5.4.0.1032.17, 5.4.0.1032.33
linux-image-4.4.0-1082-aws (Ubuntu package) - update to 4.4.0-1082.86
linux-image-kvm (Ubuntu package) - addressed in versions 4.4.0.1084.82, 4.15.0.1079.75, 4.15.0.1081.77, 5.4.0.1028.26, 5.4.0.1030.28
linux-image-4.4.0-1084-kvm (Ubuntu package) - update to 4.4.0-1084.93
linux-image-4.4.0-1118-aws (Ubuntu package) - update to 4.4.0-1118.132
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.4.0.1142.142, 4.15.0.1074.71, 5.4.0.1023.58, 5.4.0.1025.60
linux-image-4.4.0-1142-raspi2 (Ubuntu package) - update to 4.4.0-1142.152
linux-image-snapdragon (Ubuntu package) - addressed in versions 4.4.0.1146.138, 4.15.0.1091.94, 4.15.0.1093.96
linux-image-4.4.0-1146-snapdragon (Ubuntu package) - update to 4.4.0-1146.156
linux-image-oem (Ubuntu package) - addressed in versions 4.15.0.126.125, 4.15.0.128.127, 4.15.0.1103.107, 5.4.0.56.59, 5.4.0.58.61, 5.4.0.58.64~18.04.53
linux-image-generic-hwe-16.04 (Ubuntu package) - addressed in versions 4.15.0.126.125, 4.15.0.128.127
linux-image-generic-lpae-hwe-16.04 (Ubuntu package) - addressed in versions 4.15.0.126.125, 4.15.0.128.127
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - addressed in versions 4.15.0.126.125, 4.15.0.128.127
linux-image-virtual-hwe-16.04 (Ubuntu package) - addressed in versions 4.15.0.126.125, 4.15.0.128.127
linux-image-4.15.0-126-lowlatency (Ubuntu package) - addressed in versions 4.15.0-126.129, 4.15.0-126.129~16.04.1
linux-image-4.15.0-126-generic (Ubuntu package) - addressed in versions 4.15.0-126.129, 4.15.0-126.129~16.04.1
linux-image-4.15.0-126-generic-lpae (Ubuntu package) - addressed in versions 4.15.0-126.129, 4.15.0-126.129~16.04.1
linux-image-4.15.0-128-lowlatency (Ubuntu package) - addressed in versions 4.15.0-128.131, 4.15.0-128.131~16.04.1
linux-image-4.15.0-128-generic-lpae (Ubuntu package) - addressed in versions 4.15.0-128.131, 4.15.0-128.131~16.04.1
linux-image-4.15.0-128-generic (Ubuntu package) - addressed in versions 4.15.0-128.131, 4.15.0-128.131~16.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 4.15.0.1059.48, 4.15.0.1061.50, 5.4.0.1030.14, 5.4.0.1030.27, 5.4.0.1032.29, 5.4.0.1033.16
linux-image-4.15.0-1059-oracle (Ubuntu package) - addressed in versions 4.15.0-1059.65, 4.15.0-1059.65~16.04.1
linux-image-oracle-lts-18.04 (Ubuntu package) - addressed in versions 4.15.0.1059.69, 4.15.0.1061.71
linux-image-4.15.0-1061-oracle (Ubuntu package) - addressed in versions 4.15.0-1061.67, 4.15.0-1061.67~16.04.1
linux-image-gke (Ubuntu package) - addressed in versions 4.15.0.1074.78, 4.15.0.1076.80, 4.15.0.1088.89, 4.15.0.1090.91, 5.4.0.1030.38, 5.4.0.1032.41
linux-image-gke-4.15 (Ubuntu package) - addressed in versions 4.15.0.1074.78, 4.15.0.1076.80
linux-image-4.15.0-1074-raspi2 (Ubuntu package) - update to 4.15.0-1074.79
linux-image-4.15.0-1074-gke (Ubuntu package) - update to 4.15.0-1074.79
linux-image-4.15.0-1076-gke (Ubuntu package) - update to 4.15.0-1076.81
linux-image-4.15.0-1079-kvm (Ubuntu package) - update to 4.15.0-1079.81
linux-image-4.15.0-1081-kvm (Ubuntu package) - update to 4.15.0-1081.83
linux-image-aws-hwe (Ubuntu package) - addressed in versions 4.15.0.1088.82, 4.15.0.1090.84
linux-image-gcp (Ubuntu package) - addressed in versions 4.15.0.1088.89, 4.15.0.1090.91, 5.4.0.1030.18, 5.4.0.1030.38, 5.4.0.1032.20, 5.4.0.1032.41
linux-image-aws-lts-18.04 (Ubuntu package) - addressed in versions 4.15.0.1088.90, 4.15.0.1090.92
linux-image-4.15.0-1088-aws (Ubuntu package) - addressed in versions 4.15.0-1088.93, 4.15.0-1088.93~16.04.1
linux-image-4.15.0-1088-gcp (Ubuntu package) - addressed in versions 4.15.0-1088.101, 4.15.0-1088.101~16.04.1
linux-image-gcp-lts-18.04 (Ubuntu package) - addressed in versions 4.15.0.1088.106, 4.15.0.1090.108
linux-image-4.15.0-1090-aws (Ubuntu package) - addressed in versions 4.15.0-1090.95, 4.15.0-1090.95~16.04.1
linux-image-4.15.0-1090-gcp (Ubuntu package) - addressed in versions 4.15.0-1090.103, 4.15.0-1090.103~16.04.1
linux-image-4.15.0-1091-snapdragon (Ubuntu package) - update to 4.15.0-1091.100
linux-image-4.15.0-1093-snapdragon (Ubuntu package) - update to 4.15.0-1093.102
linux-image-azure-lts-18.04 (Ubuntu package) - addressed in versions 4.15.0.1100.73, 4.15.0.1102.75
linux-image-azure (Ubuntu package) - addressed in versions 4.15.0.1100.75, 4.15.0.1100.93, 4.15.0.1102.95, 5.4.0.1032.14, 5.4.0.1032.30, 5.4.0.1034.16, 5.4.0.1034.32
linux-image-azure-edge (Ubuntu package) - update to 4.15.0.1100.93
linux-image-4.15.0-1100-azure (Ubuntu package) - addressed in versions 4.15.0-1100.111, 4.15.0-1100.111~14.04.1, 4.15.0-1100.111~16.04.1
linux-image-4.15.0-1102-azure (Ubuntu package) - addressed in versions 4.15.0-1102.113, 4.15.0-1102.113~16.04.1
linux-image-4.15.0-1103-oem (Ubuntu package) - update to 4.15.0-1103.114
perf - update to 4.19.90-2011.6.0.0049
kernel-source - update to 4.19.90-2011.6.0.0049
python2-perf-debuginfo - update to 4.19.90-2011.6.0.0049
kernel-tools-debuginfo - update to 4.19.90-2011.6.0.0049
kernel-devel - update to 4.19.90-2011.6.0.0049
kernel-tools-devel - update to 4.19.90-2011.6.0.0049
bpftool-debuginfo - update to 4.19.90-2011.6.0.0049
python3-perf - update to 4.19.90-2011.6.0.0049
python2-perf - update to 4.19.90-2011.6.0.0049
python3-perf-debuginfo - update to 4.19.90-2011.6.0.0049
perf-debuginfo - update to 4.19.90-2011.6.0.0049
kernel-debuginfo - update to 4.19.90-2011.6.0.0049
kernel-tools - update to 4.19.90-2011.6.0.0049
kernel-debugsource - update to 4.19.90-2011.6.0.0049
bpftool - update to 4.19.90-2011.6.0.0049
kernel - update to 4.19.90-2011.6.0.0049
python-perf - update to 4.19.91-26
kernel-tools-libs-devel - update to 4.19.91-26
kernel-tools-libs - update to 4.19.91-26
kernel-tools - update to 4.19.91-26
kernel-headers - update to 4.19.91-26
kernel-devel - update to 4.19.91-26
perf - update to 4.19.91-26
kernel-debug-devel - update to 4.19.91-26
kernel-debug - update to 4.19.91-26
bpftool - update to 4.19.91-26
kernel - update to 4.19.91-26
linux (Debian package) - update to 4.19.152-1
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.4.0.56.59
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.56.59, 5.4.0.56.62~18.04.50, 5.4.0.58.61, 5.4.0.58.64~18.04.53
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.4.0.56.59
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.4.0.56.59
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.4.0.56.59
linux-image-5.4.0-56-lowlatency (Ubuntu package) - update to 5.4.0-56.62~18.04.1
linux-image-5.4.0-56-generic (Ubuntu package) - update to 5.4.0-56.62~18.04.1
linux-image-5.4.0-56-generic-lpae (Ubuntu package) - update to 5.4.0-56.62~18.04.1
linux-image-virtual-hwe-18.04 (Ubuntu package) - addressed in versions 5.4.0.56.62~18.04.50, 5.4.0.58.64~18.04.53
linux-image-generic-hwe-18.04 (Ubuntu package) - addressed in versions 5.4.0.56.62~18.04.50, 5.4.0.58.64~18.04.53
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - addressed in versions 5.4.0.56.62~18.04.50, 5.4.0.58.64~18.04.53
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - addressed in versions 5.4.0.56.62~18.04.50, 5.4.0.58.64~18.04.53
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - addressed in versions 5.4.0.56.62~18.04.50, 5.4.0.58.64~18.04.53
linux-image-5.4.0-58-lowlatency (Ubuntu package) - update to 5.4.0-58.64~18.04.1
linux-image-5.4.0-58-generic-lpae (Ubuntu package) - update to 5.4.0-58.64~18.04.1
linux-image-5.4.0-58-generic (Ubuntu package) - update to 5.4.0-58.64~18.04.1
linux-image-5.4.0-1023-raspi (Ubuntu package) - update to 5.4.0-1023.26~18.04.1
linux-image-raspi-hwe-18.04 (Ubuntu package) - addressed in versions 5.4.0.1023.27, 5.4.0.1025.29
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1023.58, 5.4.0.1025.60
linux-image-5.4.0-1025-raspi (Ubuntu package) - update to 5.4.0-1025.28~18.04.1
linux-image-5.4.0-1028-kvm (Ubuntu package) - update to 5.4.0-1028.29
linux-image-5.4.0-1030-kvm (Ubuntu package) - update to 5.4.0-1030.31
linux-image-5.4.0-1030-aws (Ubuntu package) - update to 5.4.0-1030.31~18.04.1
linux-image-5.4.0-1030-oracle (Ubuntu package) - update to 5.4.0-1030.32~18.04.1
linux-image-5.4.0-1030-gcp (Ubuntu package) - update to 5.4.0-1030.32~18.04.1
linux-image-5.4.0-1032-aws (Ubuntu package) - update to 5.4.0-1032.33~18.04.1
linux-image-5.4.0-1032-azure (Ubuntu package) - update to 5.4.0-1032.33~18.04.1
linux-image-5.4.0-1032-oracle (Ubuntu package) - update to 5.4.0-1032.34
linux-image-5.4.0-1032-gcp (Ubuntu package) - update to 5.4.0-1032.34~18.04.1
linux-image-5.4.0-1033-oracle (Ubuntu package) - update to 5.4.0-1033.35
linux-image-5.4.0-1034-azure (Ubuntu package) - update to 5.4.0-1034.35~18.04.1
Session Smart Router - addressed in versions 5.4.7, 5.5.3
linux-image-oem-20.04 (Ubuntu package) - update to 5.6.0.1053.49
linux-image-5.6.0-1053-oem (Ubuntu package) - update to 5.6.0-1053.57
Juniper Junos Space - update to 21.2R1

External References

Related Security Bulletins