Out-of-bounds read in Linux kernel - CVE-2021-3506

Vulnerability identifier: #VU53007

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3506

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in fs/f2fs/node.c in the f2fs module in the Linux kernel. A local user can trigger out-of-bounds read error and read internal kernel information or crash the system.

Linux kernel
Ubuntu
openEuler
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-4.15.0-173-generic (Ubuntu package)
linux-image-4.15.0-173-lowlatency (Ubuntu package)
linux-image-4.15.0-173-generic-lpae (Ubuntu package)
linux-image-dell300x (Ubuntu package)
linux-image-4.15.0-1038-dell300x (Ubuntu package)
linux-image-4.15.0-1090-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.15.0-1110-kvm (Ubuntu package)
linux-image-4.15.0-1119-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.15.0-1123-snapdragon (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1124-aws (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1134-azure (Ubuntu package)
python2-perf-debuginfo
kernel
perf
kernel-source
bpftool-debuginfo
kernel-devel
kernel-tools
kernel-tools-devel
perf-debuginfo
bpftool
kernel-debugsource
python2-perf
kernel-debuginfo
python3-perf
kernel-tools-debuginfo
python3-perf-debuginfo
linux-image-oem (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.4.0-77-generic-lpae (Ubuntu package)
linux-image-5.4.0-77-generic (Ubuntu package)
linux-image-5.4.0-77-lowlatency (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1018-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1038-raspi (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1041-kvm (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.4.0-1046-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-5.4.0-1046-gcp (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1048-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1051-azure (Ubuntu package)
linux-image-5.4.0-1051-aws (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-5.8.0-63-lowlatency (Ubuntu package)
linux-image-5.8.0-63-generic-64k (Ubuntu package)
linux-image-5.8.0-63-generic (Ubuntu package)
linux-image-5.8.0-63-generic-lpae (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1032-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1032-raspi (Ubuntu package)
linux-image-5.8.0-1033-kvm (Ubuntu package)
linux-image-5.8.0-1037-oracle (Ubuntu package)
linux-image-5.8.0-1038-gcp (Ubuntu package)
linux-image-5.8.0-1039-azure (Ubuntu package)
linux-image-5.8.0-1041-aws (Ubuntu package)

Install updates from vendor's website.

Linux kernel - update to 5.12 rc4
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to 4.15.0.173.162
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to 4.15.0.173.162
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.15.0.173.162, 5.4.0.77.80, 5.8.0.63.69
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.15.0.173.162, 5.4.0.77.80, 5.8.0.63.69
linux-image-virtual (Ubuntu package) - addressed in versions 4.15.0.173.162, 5.4.0.77.80, 5.8.0.63.69
linux-image-generic-hwe-16.04 (Ubuntu package) - update to 4.15.0.173.162
linux-image-generic (Ubuntu package) - addressed in versions 4.15.0.173.162, 5.4.0.77.80, 5.8.0.63.69
linux-image-4.15.0-173-generic (Ubuntu package) - update to 4.15.0-173.182
linux-image-4.15.0-173-lowlatency (Ubuntu package) - update to 4.15.0-173.182
linux-image-4.15.0-173-generic-lpae (Ubuntu package) - update to 4.15.0-173.182
linux-image-dell300x (Ubuntu package) - update to 4.15.0.1038.40
linux-image-4.15.0-1038-dell300x (Ubuntu package) - update to 4.15.0-1038.43
linux-image-4.15.0-1090-oracle (Ubuntu package) - update to 4.15.0-1090.99
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1090.100
linux-image-aws-hwe (Ubuntu package) - update to 4.15.0.1099.92
linux-image-kvm (Ubuntu package) - addressed in versions 4.15.0.1110.106, 5.4.0.1041.39, 5.8.0.1033.36
linux-image-4.15.0-1110-kvm (Ubuntu package) - update to 4.15.0-1110.113
linux-image-4.15.0-1119-gcp (Ubuntu package) - update to 4.15.0-1119.133
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1119.138
linux-image-snapdragon (Ubuntu package) - update to 4.15.0.1123.126
linux-image-4.15.0-1123-snapdragon (Ubuntu package) - update to 4.15.0-1123.132
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1124.127
linux-image-4.15.0-1124-aws (Ubuntu package) - update to 4.15.0-1124.133
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1134.107
linux-image-4.15.0-1134-azure (Ubuntu package) - update to 4.15.0-1134.147
python2-perf-debuginfo - update to 4.19.90-2106.3.0.0095
kernel - update to 4.19.90-2106.3.0.0095
perf - update to 4.19.90-2106.3.0.0095
kernel-source - update to 4.19.90-2106.3.0.0095
bpftool-debuginfo - update to 4.19.90-2106.3.0.0095
kernel-devel - update to 4.19.90-2106.3.0.0095
kernel-tools - update to 4.19.90-2106.3.0.0095
kernel-tools-devel - update to 4.19.90-2106.3.0.0095
perf-debuginfo - update to 4.19.90-2106.3.0.0095
bpftool - update to 4.19.90-2106.3.0.0095
kernel-debugsource - update to 4.19.90-2106.3.0.0095
python2-perf - update to 4.19.90-2106.3.0.0095
kernel-debuginfo - update to 4.19.90-2106.3.0.0095
python3-perf - update to 4.19.90-2106.3.0.0095
kernel-tools-debuginfo - update to 4.19.90-2106.3.0.0095
python3-perf-debuginfo - update to 4.19.90-2106.3.0.0095
linux-image-oem (Ubuntu package) - addressed in versions 5.4.0.77.80, 5.4.0.77.86~18.04.69, 5.4.0.105.119~18.04.90
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.77.80, 5.4.0.77.86~18.04.69
linux-image-5.4.0-77-generic-lpae (Ubuntu package) - addressed in versions 5.4.0-77.86, 5.4.0-77.86~18.04.1
linux-image-5.4.0-77-generic (Ubuntu package) - addressed in versions 5.4.0-77.86, 5.4.0-77.86~18.04.1
linux-image-5.4.0-77-lowlatency (Ubuntu package) - addressed in versions 5.4.0-77.86, 5.4.0-77.86~18.04.1
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-5.4.0-1018-gkeop (Ubuntu package) - addressed in versions 5.4.0-1018.19, 5.4.0-1018.19~18.04.1
linux-image-gkeop-5.4 (Ubuntu package) - addressed in versions 5.4.0.1018.19~18.04.19, 5.4.0.1018.21
linux-image-gkeop (Ubuntu package) - update to 5.4.0.1018.21
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1038.40
linux-image-5.4.0-1038-raspi (Ubuntu package) - addressed in versions 5.4.0-1038.41, 5.4.0-1038.41~18.04.1
linux-image-raspi2 (Ubuntu package) - update to 5.4.0.1038.73
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1038.73, 5.8.0.1032.34
linux-image-5.4.0-1041-kvm (Ubuntu package) - update to 5.4.0-1041.42
linux-image-gcp (Ubuntu package) - addressed in versions 5.4.0.1046.33, 5.4.0.1068.53, 5.8.0.1038.38, 5.8.0.1038.40~20.04.13
linux-image-5.4.0-1046-gke (Ubuntu package) - addressed in versions 5.4.0-1046.48, 5.4.0-1046.48~18.04.1
linux-image-gke-5.4 (Ubuntu package) - addressed in versions 5.4.0.1046.48~18.04.12, 5.4.0.1046.55
linux-image-5.4.0-1046-gcp (Ubuntu package) - addressed in versions 5.4.0-1046.49, 5.4.0-1046.49~18.04.1
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1046.55
linux-image-gke (Ubuntu package) - addressed in versions 5.4.0.1046.55, 5.8.0.1015.15, 5.8.0.1038.38
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1048.48
linux-image-5.4.0-1048-oracle (Ubuntu package) - addressed in versions 5.4.0-1048.52, 5.4.0-1048.52~18.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.4.0.1048.52~18.04.30, 5.4.0.1067.72~18.04.46, 5.8.0.1037.36, 5.8.0.1037.38~20.04.13
linux-image-azure (Ubuntu package) - addressed in versions 5.4.0.1051.30, 5.4.0.1073.52, 5.8.0.1039.40, 5.8.0.1039.42~20.04.11
linux-image-aws (Ubuntu package) - addressed in versions 5.4.0.1051.33, 5.8.0.1041.43, 5.8.0.1041.43~20.04.13
linux-image-azure-lts-20.04 (Ubuntu package) - update to 5.4.0.1051.49
linux-image-5.4.0-1051-azure (Ubuntu package) - addressed in versions 5.4.0-1051.53, 5.4.0-1051.53~18.04.1
linux-image-5.4.0-1051-aws (Ubuntu package) - addressed in versions 5.4.0-1051.53, 5.4.0-1051.53~18.04.1
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1051.53
linux-image-generic-64k (Ubuntu package) - update to 5.8.0.63.69
linux-image-oem-20.04 (Ubuntu package) - update to 5.8.0.63.69
linux-image-5.8.0-63-lowlatency (Ubuntu package) - addressed in versions 5.8.0-63.71, 5.8.0-63.71~20.04.1
linux-image-5.8.0-63-generic-64k (Ubuntu package) - addressed in versions 5.8.0-63.71, 5.8.0-63.71~20.04.1
linux-image-5.8.0-63-generic (Ubuntu package) - addressed in versions 5.8.0-63.71, 5.8.0-63.71~20.04.1
linux-image-5.8.0-63-generic-lpae (Ubuntu package) - addressed in versions 5.8.0-63.71, 5.8.0-63.71~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.8.0.63.71~20.04.45
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.8.0.63.71~20.04.45
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.8.0.63.71~20.04.45
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.8.0.63.71~20.04.45
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.8.0.63.71~20.04.45
linux-image-raspi-nolpae (Ubuntu package) - update to 5.8.0.1032.34
linux-image-5.8.0-1032-raspi-nolpae (Ubuntu package) - update to 5.8.0-1032.35
linux-image-5.8.0-1032-raspi (Ubuntu package) - update to 5.8.0-1032.35
linux-image-5.8.0-1033-kvm (Ubuntu package) - update to 5.8.0-1033.36
linux-image-5.8.0-1037-oracle (Ubuntu package) - addressed in versions 5.8.0-1037.38, 5.8.0-1037.38~20.04.1
linux-image-5.8.0-1038-gcp (Ubuntu package) - addressed in versions 5.8.0-1038.40, 5.8.0-1038.40~20.04.1
linux-image-5.8.0-1039-azure (Ubuntu package) - addressed in versions 5.8.0-1039.42, 5.8.0-1039.42~20.04.1
linux-image-5.8.0-1041-aws (Ubuntu package) - addressed in versions 5.8.0-1041.43, 5.8.0-1041.43~20.04.1

• https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg2520013.html
• https://www.openwall.com/lists/oss-security/2021/03/28/2
• https://bugzilla.redhat.com/show_bug.cgi?id=1944298
• http://www.openwall.com/lists/oss-security/2021/05/08/1

• Out-of-bounds read in Linux kernel
• Ubuntu update for linux
• Ubuntu update for linux
• Ubuntu update for linux
• Ubuntu update for linux-kvm
• openEuler 20.03 LTS SP1 update for kernel