Ubuntu: Security Advisory for linux (USN-5003-1)

The remote host is missing an update for the 'linux' package(s) announced via the USN-5003-1 advisory.

Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code. (CVE-2021-3609) It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code. (CVE-2021-3600) Or Cohen discovered that the SCTP implementation in the Linux kernel contained a race condition in some situations, leading to a use-after-free condition. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-23133)

'linux' package(s) on Ubuntu 18.04 LTS.

Checks if a vulnerable package version is present on the target host.

Please install the updated package(s).