{ "schema_version": "1.7.0", "id": "LSN-0082-1", "summary": "Kernel Live Patch Security Notice", "details": "Jann Horn discovered that the tty subsystem of the Linux kernel did not use\nconsistent locking in some situations, leading to a read-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly expose sensitive information (kernel memory).(CVE-2020-29660)\n\nJann Horn discovered a race condition in the tty subsystem of the Linux\nkernel in the locking for the TIOCSPGRP ioctl(), leading to a use-after-\nfree vulnerability. A local attacker could use this to cause a denial of\nservice (system crash) or possibly execute arbitrary code.(CVE-2020-29661)\n\nDe4dCr0w of 360 Alpha Lab discovered that the BPF verifier in the Linux\nkernel did not properly handle mod32 destination register truncation when\nthe source register was known to be 0. A local attacker could use this to\nexpose sensitive information (kernel memory) or possibly execute arbitrary\ncode.(CVE-2021-3444)\n\nkernel: use-after-free in route4_change() in\nnet/sched/cls_route.c(CVE-2021-3715)", "aliases": [], "upstream": [ "UBUNTU-CVE-2020-29660", "UBUNTU-CVE-2020-29661", "UBUNTU-CVE-2021-3444", "UBUNTU-CVE-2021-3715" ], "related": [], "published": "2021-11-11T06:14:44Z", "modified": "2026-06-03T10:46:31Z", "affected": [ { "package": { "ecosystem": "Ubuntu:Pro:16.04:LTS", "name": "linux-hwe", "purl": "pkg:deb/ubuntu/linux-hwe@4.15.0-136.140~16.04.1?arch=source&distro=xenial" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "4.15.0-136.140~16.04.1" } ] } ], "versions": [ "4.8.0-36.36~16.04.1", "4.8.0-39.42~16.04.1", "4.8.0-41.44~16.04.1", "4.8.0-42.45~16.04.1", "4.8.0-44.47~16.04.1", "4.8.0-45.48~16.04.1", "4.8.0-46.49~16.04.1", "4.8.0-49.52~16.04.1", "4.8.0-51.54~16.04.1", "4.8.0-52.55~16.04.1", "4.8.0-53.56~16.04.1", "4.8.0-54.57~16.04.1", "4.8.0-56.61~16.04.1", "4.8.0-58.63~16.04.1", "4.10.0-27.30~16.04.2", "4.10.0-28.32~16.04.2", "4.10.0-30.34~16.04.1", "4.10.0-32.36~16.04.1", "4.10.0-33.37~16.04.1", "4.10.0-35.39~16.04.1", "4.10.0-37.41~16.04.1", "4.10.0-38.42~16.04.1", "4.10.0-40.44~16.04.1", "4.10.0-42.46~16.04.1", "4.13.0-26.29~16.04.2", "4.13.0-31.34~16.04.1", "4.13.0-32.35~16.04.1", "4.13.0-36.40~16.04.1", "4.13.0-37.42~16.04.1", "4.13.0-38.43~16.04.1", "4.13.0-39.44~16.04.1", "4.13.0-41.46~16.04.1", "4.13.0-43.48~16.04.1", "4.13.0-45.50~16.04.1", "4.15.0-24.26~16.04.1", "4.15.0-29.31~16.04.1", "4.15.0-30.32~16.04.1", "4.15.0-32.35~16.04.1", "4.15.0-33.36~16.04.1", "4.15.0-34.37~16.04.1", "4.15.0-36.39~16.04.1", "4.15.0-38.41~16.04.1", "4.15.0-39.42~16.04.1", "4.15.0-42.45~16.04.1", "4.15.0-43.46~16.04.1", "4.15.0-45.48~16.04.1", "4.15.0-46.49~16.04.1", "4.15.0-47.50~16.04.1", "4.15.0-48.51~16.04.1", "4.15.0-50.54~16.04.1", "4.15.0-51.55~16.04.1", "4.15.0-52.56~16.04.1", "4.15.0-54.58~16.04.1", "4.15.0-55.60~16.04.2", "4.15.0-58.64~16.04.1", "4.15.0-60.67~16.04.1", "4.15.0-62.69~16.04.1", "4.15.0-64.73~16.04.1", "4.15.0-65.74~16.04.1", "4.15.0-66.75~16.04.1", "4.15.0-69.78~16.04.1", "4.15.0-70.79~16.04.1", "4.15.0-72.81~16.04.1", "4.15.0-74.83~16.04.1", "4.15.0-76.86~16.04.1", "4.15.0-88.88~16.04.1", "4.15.0-91.92~16.04.1", "4.15.0-96.97~16.04.1", "4.15.0-99.100~16.04.1", "4.15.0-101.102~16.04.1", "4.15.0-106.107~16.04.1", "4.15.0-107.108~16.04.1", "4.15.0-112.113~16.04.1", "4.15.0-115.116~16.04.1", "4.15.0-117.118~16.04.1", "4.15.0-118.119~16.04.1", "4.15.0-120.122~16.04.1", "4.15.0-122.124~16.04.1", "4.15.0-123.126~16.04.1", "4.15.0-126.129~16.04.1", "4.15.0-128.131~16.04.1", "4.15.0-129.132~16.04.1", "4.15.0-132.136~16.04.1", "4.15.0-133.137~16.04.1" ], "ecosystem_specific": { "availability": "Livepatch subscription required", "module_name_regex": "lkp_Ubuntu_4_15_0[_|\\d]+_(?:generic|lowlatency)_(\\d+)", "module_version": "82" } }, { "package": { "ecosystem": "Ubuntu:Pro:16.04:LTS", "name": "linux", "purl": "pkg:deb/ubuntu/linux@4.4.0-203.235?arch=source&distro=xenial" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "4.4.0-203.235" } ] } ], "versions": [ "4.2.0-16.19", "4.2.0-17.21", "4.2.0-19.23", "4.3.0-1.10", "4.3.0-2.11", "4.3.0-5.16", "4.3.0-6.17", "4.3.0-7.18", "4.4.0-2.16", "4.4.0-4.19", "4.4.0-6.21", "4.4.0-7.22", "4.4.0-8.23", "4.4.0-9.24", "4.4.0-10.25", "4.4.0-11.26", "4.4.0-12.28", "4.4.0-13.29", "4.4.0-14.30", "4.4.0-15.31", "4.4.0-16.32", "4.4.0-17.33", "4.4.0-18.34", "4.4.0-21.37", "4.4.0-22.39", "4.4.0-22.40", "4.4.0-24.43", "4.4.0-28.47", "4.4.0-31.50", "4.4.0-34.53", "4.4.0-36.55", "4.4.0-38.57", "4.4.0-42.62", "4.4.0-43.63", "4.4.0-45.66", "4.4.0-47.68", "4.4.0-51.72", "4.4.0-53.74", "4.4.0-57.78", "4.4.0-59.80", "4.4.0-62.83", "4.4.0-63.84", "4.4.0-64.85", "4.4.0-65.86", "4.4.0-66.87", "4.4.0-67.88", "4.4.0-70.91", "4.4.0-71.92", "4.4.0-72.93", "4.4.0-75.96", "4.4.0-77.98", "4.4.0-78.99", "4.4.0-79.100", "4.4.0-81.104", "4.4.0-83.106", "4.4.0-87.110", "4.4.0-89.112", "4.4.0-91.114", "4.4.0-92.115", "4.4.0-93.116", "4.4.0-96.119", "4.4.0-97.120", "4.4.0-98.121", "4.4.0-101.124", "4.4.0-103.126", "4.4.0-104.127", "4.4.0-108.131", "4.4.0-109.132", "4.4.0-112.135", "4.4.0-116.140", "4.4.0-119.143", "4.4.0-121.145", "4.4.0-122.146", "4.4.0-124.148", "4.4.0-127.153", "4.4.0-128.154", "4.4.0-130.156", "4.4.0-131.157", "4.4.0-133.159", "4.4.0-134.160", "4.4.0-135.161", "4.4.0-137.163", "4.4.0-138.164", "4.4.0-139.165", "4.4.0-140.166", "4.4.0-141.167", "4.4.0-142.168", "4.4.0-143.169", "4.4.0-145.171", "4.4.0-146.172", "4.4.0-148.174", "4.4.0-150.176", "4.4.0-151.178", "4.4.0-154.181", "4.4.0-157.185", "4.4.0-159.187", "4.4.0-161.189", "4.4.0-164.192", "4.4.0-165.193", "4.4.0-166.195", "4.4.0-168.197", "4.4.0-169.198", "4.4.0-170.199", "4.4.0-171.200", "4.4.0-173.203", "4.4.0-174.204", "4.4.0-176.206", "4.4.0-177.207", "4.4.0-178.208", "4.4.0-179.209", "4.4.0-184.214", "4.4.0-185.215", "4.4.0-186.216", "4.4.0-187.217", "4.4.0-189.219", "4.4.0-190.220", "4.4.0-193.224", "4.4.0-194.226", "4.4.0-197.229", "4.4.0-198.230", "4.4.0-200.232", "4.4.0-201.233" ], "ecosystem_specific": { "availability": "Livepatch subscription required", "module_name_regex": "lkp_Ubuntu_4_4_0[_|\\d]+_(?:generic|lowlatency)_(\\d+)", "module_version": "82" } }, { "package": { "ecosystem": "Ubuntu:Pro:18.04:LTS", "name": "linux", "purl": "pkg:deb/ubuntu/linux@4.15.0-136.140?arch=source&distro=bionic" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "4.15.0-136.140" } ] } ], "versions": [ "4.13.0-16.19", "4.13.0-17.20", "4.13.0-25.29", "4.13.0-32.35", "4.15.0-10.11", "4.15.0-12.13", "4.15.0-13.14", "4.15.0-15.16", "4.15.0-19.20", "4.15.0-20.21", "4.15.0-22.24", "4.15.0-23.25", "4.15.0-24.26", "4.15.0-29.31", "4.15.0-30.32", "4.15.0-32.35", "4.15.0-33.36", "4.15.0-34.37", "4.15.0-36.39", "4.15.0-38.41", "4.15.0-39.42", "4.15.0-42.45", "4.15.0-43.46", "4.15.0-44.47", "4.15.0-45.48", "4.15.0-46.49", "4.15.0-47.50", "4.15.0-48.51", "4.15.0-50.54", "4.15.0-51.55", "4.15.0-52.56", "4.15.0-54.58", "4.15.0-55.60", "4.15.0-58.64", "4.15.0-60.67", "4.15.0-62.69", "4.15.0-64.73", "4.15.0-65.74", "4.15.0-66.75", "4.15.0-69.78", "4.15.0-70.79", "4.15.0-72.81", "4.15.0-74.84", "4.15.0-76.86", "4.15.0-88.88", "4.15.0-91.92", "4.15.0-96.97", "4.15.0-99.100", "4.15.0-101.102", "4.15.0-106.107", "4.15.0-108.109", "4.15.0-109.110", "4.15.0-111.112", "4.15.0-112.113", "4.15.0-115.116", "4.15.0-117.118", "4.15.0-118.119", "4.15.0-121.123", "4.15.0-122.124", "4.15.0-123.126", "4.15.0-124.127", "4.15.0-126.129", "4.15.0-128.131", "4.15.0-129.132", "4.15.0-130.134", "4.15.0-132.136", "4.15.0-134.138", "4.15.0-135.139" ], "ecosystem_specific": { "availability": "Livepatch subscription required", "module_name_regex": "lkp_Ubuntu_4_15_0[_|\\d]+_(?:generic|lowlatency)_(\\d+)", "module_version": "82" } }, { "package": { "ecosystem": "Ubuntu:Pro:18.04:LTS", "name": "linux-gke-4.15", "purl": "pkg:deb/ubuntu/linux-gke-4.15@4.15.0-1079.84?arch=source&distro=bionic" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "4.15.0-1079.84" } ] } ], "versions": [ "4.15.0-1030.32", "4.15.0-1032.34", "4.15.0-1033.35", "4.15.0-1034.36", "4.15.0-1036.38", "4.15.0-1037.39", "4.15.0-1040.42", "4.15.0-1041.43", "4.15.0-1042.44", "4.15.0-1044.46", "4.15.0-1045.48", "4.15.0-1046.49", "4.15.0-1048.51", "4.15.0-1049.52", "4.15.0-1050.53", "4.15.0-1052.55", "4.15.0-1055.58", "4.15.0-1057.60", "4.15.0-1058.61", "4.15.0-1059.62", "4.15.0-1063.66", "4.15.0-1064.67", "4.15.0-1066.69", "4.15.0-1067.70", "4.15.0-1069.72", "4.15.0-1070.73", "4.15.0-1072.76", "4.15.0-1073.78", "4.15.0-1074.79", "4.15.0-1076.81", "4.15.0-1077.82", "4.15.0-1078.83" ], "ecosystem_specific": { "availability": "Livepatch subscription required", "module_name_regex": "lkp_Ubuntu_4_15_0[_|\\d]+_gke_(\\d+)", "module_version": "82" } }, { "package": { "ecosystem": "Ubuntu:Pro:18.04:LTS", "name": "linux-gke-5.4", "purl": "pkg:deb/ubuntu/linux-gke-5.4@5.4.0-1039.41~18.04.1?arch=source&distro=bionic" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "5.4.0-1039.41~18.04.1" } ] } ], "versions": [ "5.4.0-1025.25~18.04.1", "5.4.0-1027.28~18.04.1", "5.4.0-1029.31~18.04.1", "5.4.0-1030.32~18.04.1", "5.4.0-1032.34~18.04.1", "5.4.0-1033.35~18.04.1", "5.4.0-1035.37~18.04.1", "5.4.0-1036.38~18.04.1", "5.4.0-1037.39~18.04.1" ], "ecosystem_specific": { "availability": "Livepatch subscription required", "module_name_regex": "lkp_Ubuntu_5_4_0[_|\\d]+_gke_(\\d+)", "module_version": "82" } }, { "package": { "ecosystem": "Ubuntu:Pro:18.04:LTS", "name": "linux-gkeop-5.4", "purl": "pkg:deb/ubuntu/linux-gkeop-5.4@5.4.0-1012.13~18.04.1?arch=source&distro=bionic" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "5.4.0-1012.13~18.04.1" } ] } ], "versions": [ "5.4.0-1001.1", "5.4.0-1003.3", "5.4.0-1004.5", "5.4.0-1005.6", "5.4.0-1007.8~18.04.1", "5.4.0-1008.9~18.04.1", "5.4.0-1009.10~18.04.1", "5.4.0-1010.11~18.04.1", "5.4.0-1011.12~18.04.2" ], "ecosystem_specific": { "availability": "Livepatch subscription required", "module_name_regex": "lkp_Ubuntu_5_4_0[_|\\d]+_gkeop_(\\d+)", "module_version": "82" } }, { "package": { "ecosystem": "Ubuntu:Pro:18.04:LTS", "name": "linux-hwe-5.4", "purl": "pkg:deb/ubuntu/linux-hwe-5.4@5.4.0-70.78~18.04.1?arch=source&distro=bionic" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "5.4.0-70.78~18.04.1" } ] } ], "versions": [ "5.4.0-37.41~18.04.1", "5.4.0-39.43~18.04.1", "5.4.0-40.44~18.04.1", "5.4.0-42.46~18.04.1", "5.4.0-45.49~18.04.2", "5.4.0-47.51~18.04.1", "5.4.0-48.52~18.04.1", "5.4.0-51.56~18.04.1", "5.4.0-52.57~18.04.1", "5.4.0-53.59~18.04.1", "5.4.0-54.60~18.04.1", "5.4.0-56.62~18.04.1", "5.4.0-58.64~18.04.1", "5.4.0-59.65~18.04.1", "5.4.0-60.67~18.04.1", "5.4.0-62.70~18.04.1", "5.4.0-64.72~18.04.1", "5.4.0-65.73~18.04.1", "5.4.0-66.74~18.04.2", "5.4.0-67.75~18.04.1" ], "ecosystem_specific": { "availability": "Livepatch subscription required", "module_name_regex": "lkp_Ubuntu_5_4_0[_|\\d]+_(?:generic|lowlatency)_(\\d+)", "module_version": "82" } }, { "package": { "ecosystem": "Ubuntu:Pro:18.04:LTS", "name": "linux-oem", "purl": "pkg:deb/ubuntu/linux-oem@4.15.0-1103.114?arch=source&distro=bionic" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" } ] } ], "versions": [ "4.15.0-1002.3", "4.15.0-1004.5", "4.15.0-1006.9", "4.15.0-1008.11", "4.15.0-1009.12", "4.15.0-1012.15", "4.15.0-1013.16", "4.15.0-1015.18", "4.15.0-1017.20", "4.15.0-1018.21", "4.15.0-1021.24", "4.15.0-1024.29", "4.15.0-1026.31", "4.15.0-1028.33", "4.15.0-1030.35", "4.15.0-1033.38", "4.15.0-1034.39", "4.15.0-1035.40", "4.15.0-1036.41", "4.15.0-1038.43", "4.15.0-1039.44", "4.15.0-1043.48", "4.15.0-1045.50", "4.15.0-1050.57", "4.15.0-1056.65", "4.15.0-1057.66", "4.15.0-1059.68", "4.15.0-1063.72", "4.15.0-1064.73", "4.15.0-1065.75", "4.15.0-1066.76", "4.15.0-1067.77", "4.15.0-1069.79", "4.15.0-1073.83", "4.15.0-1076.86", "4.15.0-1079.89", "4.15.0-1080.90", "4.15.0-1081.91", "4.15.0-1087.97", "4.15.0-1090.100", "4.15.0-1091.101", "4.15.0-1093.103", "4.15.0-1094.104", "4.15.0-1096.106", "4.15.0-1097.107", "4.15.0-1099.109", "4.15.0-1100.110", "4.15.0-1101.112", "4.15.0-1102.113", "4.15.0-1103.114" ], "ecosystem_specific": { "availability": "Livepatch subscription required", "module_name_regex": "lkp_Ubuntu_4_15_0[_|\\d]+_oem_(\\d+)", "module_version": "82" } }, { "package": { "ecosystem": "Ubuntu:Pro:20.04:LTS", "name": "linux", "purl": "pkg:deb/ubuntu/linux@5.4.0-70.78?arch=source&distro=focal" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "5.4.0-70.78" } ] } ], "versions": [ "5.3.0-18.19", "5.3.0-24.26", "5.4.0-9.12", "5.4.0-18.22", "5.4.0-21.25", "5.4.0-24.28", "5.4.0-25.29", "5.4.0-26.30", "5.4.0-28.32", "5.4.0-29.33", "5.4.0-31.35", "5.4.0-33.37", "5.4.0-37.41", "5.4.0-39.43", "5.4.0-40.44", "5.4.0-42.46", "5.4.0-45.49", "5.4.0-47.51", "5.4.0-48.52", "5.4.0-51.56", "5.4.0-52.57", "5.4.0-53.59", "5.4.0-54.60", "5.4.0-56.62", "5.4.0-58.64", "5.4.0-59.65", "5.4.0-60.67", "5.4.0-62.70", "5.4.0-64.72", "5.4.0-65.73", "5.4.0-66.74", "5.4.0-67.75" ], "ecosystem_specific": { "availability": "Livepatch subscription required", "module_name_regex": "lkp_Ubuntu_5_4_0[_|\\d]+_(?:generic|lowlatency)_(\\d+)", "module_version": "82" } }, { "package": { "ecosystem": "Ubuntu:Pro:20.04:LTS", "name": "linux-gcp", "purl": "pkg:deb/ubuntu/linux-gcp@5.4.0-1040.43?arch=source&distro=focal" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "5.4.0-1040.43" } ] } ], "versions": [ "5.3.0-1004.4", "5.3.0-1009.10", "5.3.0-1011.12", "5.4.0-1005.5", "5.4.0-1007.7", "5.4.0-1008.8", "5.4.0-1009.9", "5.4.0-1011.11", "5.4.0-1015.15", "5.4.0-1018.18", "5.4.0-1019.19", "5.4.0-1021.21", "5.4.0-1022.22", "5.4.0-1024.24", "5.4.0-1025.25", "5.4.0-1028.29", "5.4.0-1029.31", "5.4.0-1030.32", "5.4.0-1032.34", "5.4.0-1033.35", "5.4.0-1034.37", "5.4.0-1036.39", "5.4.0-1037.40", "5.4.0-1038.41" ], "ecosystem_specific": { "availability": "Livepatch subscription required", "module_name_regex": "lkp_Ubuntu_5_4_0[_|\\d]+_gcp_(\\d+)", "module_version": "82" } }, { "package": { "ecosystem": "Ubuntu:Pro:20.04:LTS", "name": "linux-gke", "purl": "pkg:deb/ubuntu/linux-gke@5.4.0-1039.41?arch=source&distro=focal" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "5.4.0-1039.41" } ] } ], "versions": [ "5.4.0-1033.35", "5.4.0-1035.37", "5.4.0-1036.38", "5.4.0-1037.39" ], "ecosystem_specific": { "availability": "Livepatch subscription required", "module_name_regex": "lkp_Ubuntu_5_4_0[_|\\d]+_gke_(\\d+)", "module_version": "82" } }, { "package": { "ecosystem": "Ubuntu:Pro:20.04:LTS", "name": "linux-gkeop", "purl": "pkg:deb/ubuntu/linux-gkeop@5.4.0-1012.13?arch=source&distro=focal" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "5.4.0-1012.13" } ] } ], "versions": [ "5.4.0-1008.9", "5.4.0-1009.10", "5.4.0-1010.11", "5.4.0-1011.12" ], "ecosystem_specific": { "availability": "Livepatch subscription required", "module_name_regex": "lkp_Ubuntu_5_4_0[_|\\d]+_gkeop_(\\d+)", "module_version": "82" } } ], "references": [ { "type": "ADVISORY", "url": "https://ubuntu.com/security/notices/LSN-0082-1" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2020-29660" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2020-29661" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2021-3444" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2021-3715" } ] }