vulnerability
Ubuntu: (CVE-2021-35039): linux-aws-5.11 vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:N/C:C/I:C/A:C) | Jul 7, 2021 | Nov 19, 2024 | Jun 26, 2025 |
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Jul 7, 2021
Added
Nov 19, 2024
Modified
Jun 26, 2025
Description
kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.
Solution(s)
no-fix-ubuntu-packageubuntu-upgrade-linux-aws-5-11ubuntu-upgrade-linux-aws-fipsubuntu-upgrade-linux-azure-5-11ubuntu-upgrade-linux-azure-fipsubuntu-upgrade-linux-fipsubuntu-upgrade-linux-gcp-5-11ubuntu-upgrade-linux-gcp-fipsubuntu-upgrade-linux-oracle-5-11
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.