vulnerability
Ubuntu: (Multiple Advisories) (CVE-2020-28588): Linux kernel vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 2 | (AV:L/AC:L/Au:N/C:P/I:N/A:N) | Feb 25, 2021 | Feb 26, 2021 | Mar 22, 2023 |
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
Feb 25, 2021
Added
Feb 26, 2021
Modified
Mar 22, 2023
Description
An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has been introduced in v5.1-rc4 (commit 631b7abacd02b88f4b0795c08b54ad4fc3e7c7c0) and is still present in v5.10-rc4, so it’s likely that all versions in between are affected. An attacker can read /proc/pid/syscall to trigger this vulnerability, which leads to the kernel leaking memory contents.
Solution(s)
ubuntu-upgrade-linux-image-5-4-0-1010-gkeopubuntu-upgrade-linux-image-5-4-0-1029-raspiubuntu-upgrade-linux-image-5-4-0-1033-kvmubuntu-upgrade-linux-image-5-4-0-1036-gkeubuntu-upgrade-linux-image-5-4-0-1037-gcpubuntu-upgrade-linux-image-5-4-0-1038-awsubuntu-upgrade-linux-image-5-4-0-1038-oracleubuntu-upgrade-linux-image-5-4-0-1040-azureubuntu-upgrade-linux-image-5-4-0-66-genericubuntu-upgrade-linux-image-5-4-0-66-generic-lpaeubuntu-upgrade-linux-image-5-4-0-66-lowlatencyubuntu-upgrade-linux-image-5-6-0-1048-oemubuntu-upgrade-linux-image-5-8-0-1016-raspiubuntu-upgrade-linux-image-5-8-0-1016-raspi-nolpaeubuntu-upgrade-linux-image-5-8-0-1019-kvmubuntu-upgrade-linux-image-5-8-0-1021-oracleubuntu-upgrade-linux-image-5-8-0-1023-azureubuntu-upgrade-linux-image-5-8-0-1023-gcpubuntu-upgrade-linux-image-5-8-0-1024-awsubuntu-upgrade-linux-image-5-8-0-44-genericubuntu-upgrade-linux-image-5-8-0-44-generic-64kubuntu-upgrade-linux-image-5-8-0-44-generic-lpaeubuntu-upgrade-linux-image-5-8-0-44-lowlatencyubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-hwe-20-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-hwe-20-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-4ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-4ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-hwe-20-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-20-04ubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-hwe-20-04
References
- CVE-2020-28588
- https://attackerkb.com/topics/CVE-2020-28588
- NVD-CVE-2020-28588
- UBUNTU-USN-4525-1
- UBUNTU-USN-4527-1
- UBUNTU-USN-4576-1
- UBUNTU-USN-4578-1
- UBUNTU-USN-4579-1
- UBUNTU-USN-4592-1
- UBUNTU-USN-4657-1
- UBUNTU-USN-4658-1
- UBUNTU-USN-4659-1
- UBUNTU-USN-4660-1
- UBUNTU-USN-4679-1
- UBUNTU-USN-4680-1
- UBUNTU-USN-4710-1
- UBUNTU-USN-4711-1
- UBUNTU-USN-4748-1
- UBUNTU-USN-4749-1
- UBUNTU-USN-4750-1
- UBUNTU-USN-4751-1
- UBUNTU-USN-4752-1
- UBUNTU-USN-5130-1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.