Ubuntu: Security Advisory for linux (USN-5045-1)

The remote host is missing an update for the 'linux' package(s) announced via the USN-5045-1 advisory.

Norbert Slusarek discovered that the CAN broadcast manager (bcm) protocol implementation in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2021-34693) It was discovered that the bluetooth subsystem in the Linux kernel did not properly handle HCI device initialization failure, leading to a double-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2021-3564) It was discovered that the bluetooth subsystem in the Linux kernel did not properly handle HCI device detach events, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2021-3573) It was discovered that the NFC implementation in the Linux kernel did not properly handle failed connect events leading to a NULL pointer dereference. A local attacker could use this to cause a denial of service. (CVE-2021-3587)

'linux' package(s) on Ubuntu 20.04 LTS, Ubuntu 18.04 LTS.

Checks if a vulnerable package version is present on the target host.

Please install the updated package(s).