usn-5071-2
Vulnerability from osv_ubuntu
Published
2021-09-16 17:13
Modified
2026-06-03 10:45
Summary
linux-hwe-5.4 vulnerabilities
Details

USN-5071-1 fixed vulnerabilities in the Linux kernel for Ubuntu 20.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 20.04 LTS for Ubuntu 18.04 LTS.

Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel allowed a guest VM to disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a guest VM could use this to read or write portions of the host's physical memory. (CVE-2021-3656)

Maxim Levitsky discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel did not properly prevent a guest VM from enabling AVIC in nested guest VMs. An attacker in a guest VM could use this to write to portions of the host's physical memory. (CVE-2021-3653)

It was discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel did not ensure enough processing time was given to perform cleanups of large SEV VMs. A local attacker could use this to cause a denial of service (soft lockup). (CVE-2020-36311)

It was discovered that the KVM hypervisor implementation in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. An attacker who could start and control a VM could possibly use this to expose sensitive information or execute arbitrary code. (CVE-2021-22543)

Murray McAllister discovered that the joystick device interface in the Linux kernel did not properly validate data passed via an ioctl(). A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code on systems with a joystick device registered. (CVE-2021-3612)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2020-36311",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-3612",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-3653",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-3656",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-22543",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L",
                  "type": "CVSS_V4"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "block-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "block-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "crypto-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "crypto-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "dasd-extra-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "dasd-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "fat-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "fat-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "fb-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "firewire-core-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "floppy-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "fs-core-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "fs-core-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "input-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "input-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "ipmi-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "ipmi-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "kernel-image-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "kernel-image-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.4.0-84-generic",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.4.0-84-generic-lpae",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.4.0-84-lowlatency",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.4.0-84-generic",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.4.0-84-lowlatency",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-headers-5.4.0-84-generic",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-headers-5.4.0-84-generic-lpae",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-headers-5.4.0-84-lowlatency",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-hwe-5.4-cloud-tools-5.4.0-84",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-hwe-5.4-cloud-tools-common",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-hwe-5.4-headers-5.4.0-84",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-hwe-5.4-source-5.4.0",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-hwe-5.4-tools-5.4.0-84",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-hwe-5.4-tools-common",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-hwe-5.4-udebs-generic",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-hwe-5.4-udebs-generic-lpae",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-image-5.4.0-84-generic",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-image-5.4.0-84-generic-lpae",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-image-5.4.0-84-lowlatency",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.4.0-84-generic",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.4.0-84-lowlatency",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-modules-5.4.0-84-generic",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-modules-5.4.0-84-generic-lpae",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-modules-5.4.0-84-lowlatency",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.4.0-84-generic",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-tools-5.4.0-84-generic",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-tools-5.4.0-84-generic-lpae",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "linux-tools-5.4.0-84-lowlatency",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "md-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "md-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "message-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "mouse-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "mouse-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "multipath-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "multipath-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "nfs-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "nfs-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "nic-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "nic-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "nic-pcmcia-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "nic-shared-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "nic-shared-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "nic-usb-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "nic-usb-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "parport-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "parport-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "pata-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "pcmcia-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "pcmcia-storage-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "plip-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "plip-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "ppp-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "ppp-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "sata-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "sata-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "scsi-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "scsi-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "serial-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "storage-core-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "storage-core-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "usb-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "usb-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "virtio-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "vlan-modules-5.4.0-84-generic-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          },
          {
            "binary_name": "vlan-modules-5.4.0-84-generic-lpae-di",
            "binary_version": "5.4.0-84.94~18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-hwe-5.4",
        "purl": "pkg:deb/ubuntu/linux-hwe-5.4@5.4.0-84.94~18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.4.0-84.94~18.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.4.0-37.41~18.04.1",
        "5.4.0-39.43~18.04.1",
        "5.4.0-40.44~18.04.1",
        "5.4.0-42.46~18.04.1",
        "5.4.0-45.49~18.04.2",
        "5.4.0-47.51~18.04.1",
        "5.4.0-48.52~18.04.1",
        "5.4.0-51.56~18.04.1",
        "5.4.0-52.57~18.04.1",
        "5.4.0-53.59~18.04.1",
        "5.4.0-54.60~18.04.1",
        "5.4.0-56.62~18.04.1",
        "5.4.0-58.64~18.04.1",
        "5.4.0-59.65~18.04.1",
        "5.4.0-60.67~18.04.1",
        "5.4.0-62.70~18.04.1",
        "5.4.0-64.72~18.04.1",
        "5.4.0-65.73~18.04.1",
        "5.4.0-66.74~18.04.2",
        "5.4.0-67.75~18.04.1",
        "5.4.0-70.78~18.04.1",
        "5.4.0-71.79~18.04.1",
        "5.4.0-72.80~18.04.1",
        "5.4.0-73.82~18.04.1",
        "5.4.0-74.83~18.04.1",
        "5.4.0-77.86~18.04.1",
        "5.4.0-80.90~18.04.1",
        "5.4.0-81.91~18.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "USN-5071-1 fixed vulnerabilities in the Linux kernel for Ubuntu 20.04\nLTS. This update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 20.04 LTS for Ubuntu\n18.04 LTS.\n\nMaxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor\nimplementation for AMD processors in the Linux kernel allowed a guest VM to\ndisable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a\nguest VM could use this to read or write portions of the host\u0027s physical\nmemory. (CVE-2021-3656)\n\nMaxim Levitsky discovered that the KVM hypervisor implementation for AMD\nprocessors in the Linux kernel did not properly prevent a guest VM from\nenabling AVIC in nested guest VMs. An attacker in a guest VM could use this\nto write to portions of the host\u0027s physical memory. (CVE-2021-3653)\n\nIt was discovered that the KVM hypervisor implementation for AMD processors\nin the Linux kernel did not ensure enough processing time was given to\nperform cleanups of large SEV VMs. A local attacker could use this to cause\na denial of service (soft lockup). (CVE-2020-36311)\n\nIt was discovered that the KVM hypervisor implementation in the Linux\nkernel did not properly perform reference counting in some situations,\nleading to a use-after-free vulnerability. An attacker who could start and\ncontrol a VM could possibly use this to expose sensitive information or\nexecute arbitrary code. (CVE-2021-22543)\n\nMurray McAllister discovered that the joystick device interface in the\nLinux kernel did not properly validate data passed via an ioctl(). A local\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code on systems with a joystick device\nregistered. (CVE-2021-3612)\n",
  "id": "USN-5071-2",
  "modified": "2026-06-03T10:45:26Z",
  "published": "2021-09-16T17:13:34Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5071-2"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-36311"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-3612"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-3653"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-3656"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-22543"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "linux-hwe-5.4 vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2020-36311",
    "UBUNTU-CVE-2021-3612",
    "UBUNTU-CVE-2021-3653",
    "UBUNTU-CVE-2021-3656",
    "UBUNTU-CVE-2021-22543"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.