Test ID:	1.3.6.1.4.1.25623.1.0.844542
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-4465-1)
Summary:	The remote host is missing an update for the 'linux-aws-5.3, linux-azure-5.3, linux-gke-5.3, linux-hwe' package(s) announced via the USN-4465-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-aws-5.3, linux-azure-5.3, linux-gke-5.3, linux-hwe' package(s) announced via the USN-4465-1 advisory. Vulnerability Insight: It was discovered that the XFS file system implementation in the Linux kernel did not properly validate meta data in some circumstances. An attacker could use this to construct a malicious XFS image that, when mounted, could cause a denial of service. (CVE-2020-12655) It was discovered that the bcache subsystem in the Linux kernel did not properly release a lock in some error conditions. A local attacker could possibly use this to cause a denial of service. (CVE-2020-12771) Kyungtae Kim discovered that the USB testing driver in the Linux kernel did not properly deallocate memory on disconnect events. A physically proximate attacker could use this to cause a denial of service (memory exhaustion). (CVE-2020-15393) Affected Software/OS: 'linux-aws-5.3, linux-azure-5.3, linux-gke-5.3, linux-hwe' package(s) on Ubuntu 18.04. Solution: Please install the updated package(s). CVSS Score: 4.9 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-12655 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ2X3TM6RGRUS3KZAS26IJO5XGU7TBBR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IO5XIQSRI747P4RVVTNX7TUPEOCF4OPU/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ES5C6ZCMALBEBMKNNCTBSLLSYGFZG3FF/ https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d0c7feaf87678371c2c09b3709400be416b2dc62 https://github.com/torvalds/linux/commit/d0c7feaf87678371c2c09b3709400be416b2dc62 https://lore.kernel.org/linux-xfs/20200221153803.GP9506@magnolia/ https://lists.debian.org/debian-lts-announce/2020/08/msg00019.html https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html SuSE Security Announcement: openSUSE-SU-2020:0801 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html https://usn.ubuntu.com/4465-1/ https://usn.ubuntu.com/4483-1/ https://usn.ubuntu.com/4485-1/ Common Vulnerability Exposure (CVE) ID: CVE-2020-12771 https://lkml.org/lkml/2020/4/26/87 https://security.netapp.com/advisory/ntap-20200608-0001/ https://www.oracle.com/security-alerts/cpuApr2021.html SuSE Security Announcement: openSUSE-SU-2020:1062 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00071.html SuSE Security Announcement: openSUSE-SU-2020:1153 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html https://usn.ubuntu.com/4462-1/ https://usn.ubuntu.com/4463-1/ Common Vulnerability Exposure (CVE) ID: CVE-2020-15393 https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=831eebad70a25f55b5745453ac252d4afe997187 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=28ebeb8db77035e058a510ce9bd17c2b9a009dba https://lkml.org/lkml/2020/6/2/968 Common Vulnerability Exposure (CVE) ID: CVE-2020-24394 https://security.netapp.com/advisory/ntap-20200904-0003/ https://www.starwindsoftware.com/security/sw-20210325-0004/ https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=962254 https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.8 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=22cf8419f1319ff87ec759d0ebdff4cbafaee832 SuSE Security Announcement: openSUSE-SU-2020:1325 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.