FlawAtlas
Search the atlas
USN-4876-1 Not scored

linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon vulnerabilities

Olivier Benjamin and Pawel Wieczorkiewicz discovered a race condition the Xen paravirt block backend in the Linux kernel, leading to a use-after-free vulnerability. An attacker in a guest VM could use this to cause a denial of service in the host OS. (CVE-2020-29569) It was discovered that the Marvell WiFi-Ex device driver in the Linux kernel did not properly validate ad-hoc SSIDs. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-36158) 吴异 discovered that the NFS implementation in the Linux kernel did not properly prevent access outside of an NFS export that is a subdirectory of a file system. An attacker could possibly use this to bypass NFS access restrictions. (CVE-2021-3178)

Exploit probability Not scored
Published March 16, 2021
Required by Not available
Last source change June 3, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:16.04:LTS linux

123 explicit affected versions

Ubuntu:16.04:LTS linux-aws

79 explicit affected versions

Ubuntu:16.04:LTS linux-kvm

58 explicit affected versions

Ubuntu:16.04:LTS linux-raspi2

92 explicit affected versions

Ubuntu:16.04:LTS linux-snapdragon

90 explicit affected versions

Ubuntu:Pro:14.04:LTS linux-aws

57 explicit affected versions

Ubuntu:Pro:14.04:LTS linux-lts-xenial

101 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities USN-4876-1

Olivier Benjamin and Pawel Wieczorkiewicz discovered a race condition the Xen paravirt block backend in the Linux kernel, leading to a use-after-free vulnerability. An attacker in a guest VM could use this to cause a denial of service in the host OS. (CVE-2020-29569) It was discovered that the Marvell WiFi-Ex device driver in the Linux kernel did not properly validate ad-hoc SSIDs. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-36158) 吴异 discovered that the NFS implementation in the Linux kernel did not properly prevent access outside of an NFS export that is a subdirectory of a file system. An attacker could possibly use this to bypass NFS access restrictions. (CVE-2021-3178)

View original source

05 / REFERENCES

Further evidence