Ubuntu: (Multiple Advisories) (CVE-2020-29660): Linux kernel vulnerabilities
2
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
12/09/2020
03/02/2021
02/26/2021
03/22/2023
Description
A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.
Solution(s)
- ubuntu-upgrade-linux-image-3-13-0-188-generic
- ubuntu-upgrade-linux-image-3-13-0-188-lowlatency
- ubuntu-upgrade-linux-image-4-15-0-1012-dell300x
- ubuntu-upgrade-linux-image-4-15-0-1065-oracle
- ubuntu-upgrade-linux-image-4-15-0-1079-gke
- ubuntu-upgrade-linux-image-4-15-0-1079-raspi2
- ubuntu-upgrade-linux-image-4-15-0-1085-kvm
- ubuntu-upgrade-linux-image-4-15-0-1093-gcp
- ubuntu-upgrade-linux-image-4-15-0-1094-aws
- ubuntu-upgrade-linux-image-4-15-0-1096-snapdragon
- ubuntu-upgrade-linux-image-4-15-0-1108-azure
- ubuntu-upgrade-linux-image-4-15-0-136-generic
- ubuntu-upgrade-linux-image-4-15-0-136-generic-lpae
- ubuntu-upgrade-linux-image-4-15-0-136-lowlatency
- ubuntu-upgrade-linux-image-4-4-0-1086-aws
- ubuntu-upgrade-linux-image-4-4-0-1088-kvm
- ubuntu-upgrade-linux-image-4-4-0-1122-aws
- ubuntu-upgrade-linux-image-4-4-0-1146-raspi2
- ubuntu-upgrade-linux-image-4-4-0-1150-snapdragon
- ubuntu-upgrade-linux-image-4-4-0-203-generic
- ubuntu-upgrade-linux-image-4-4-0-203-generic-lpae
- ubuntu-upgrade-linux-image-4-4-0-203-lowlatency
- ubuntu-upgrade-linux-image-4-4-0-203-powerpc-e500mc
- ubuntu-upgrade-linux-image-4-4-0-203-powerpc-smp
- ubuntu-upgrade-linux-image-4-4-0-203-powerpc64-emb
- ubuntu-upgrade-linux-image-4-4-0-203-powerpc64-smp
- ubuntu-upgrade-linux-image-5-4-0-1010-gkeop
- ubuntu-upgrade-linux-image-5-4-0-1029-raspi
- ubuntu-upgrade-linux-image-5-4-0-1033-kvm
- ubuntu-upgrade-linux-image-5-4-0-1036-gke
- ubuntu-upgrade-linux-image-5-4-0-1037-gcp
- ubuntu-upgrade-linux-image-5-4-0-1038-aws
- ubuntu-upgrade-linux-image-5-4-0-1038-oracle
- ubuntu-upgrade-linux-image-5-4-0-1040-azure
- ubuntu-upgrade-linux-image-5-4-0-66-generic
- ubuntu-upgrade-linux-image-5-4-0-66-generic-lpae
- ubuntu-upgrade-linux-image-5-4-0-66-lowlatency
- ubuntu-upgrade-linux-image-5-6-0-1048-oem
- ubuntu-upgrade-linux-image-5-8-0-1016-raspi
- ubuntu-upgrade-linux-image-5-8-0-1016-raspi-nolpae
- ubuntu-upgrade-linux-image-5-8-0-1019-kvm
- ubuntu-upgrade-linux-image-5-8-0-1021-oracle
- ubuntu-upgrade-linux-image-5-8-0-1023-azure
- ubuntu-upgrade-linux-image-5-8-0-1023-gcp
- ubuntu-upgrade-linux-image-5-8-0-1024-aws
- ubuntu-upgrade-linux-image-5-8-0-44-generic
- ubuntu-upgrade-linux-image-5-8-0-44-generic-64k
- ubuntu-upgrade-linux-image-5-8-0-44-generic-lpae
- ubuntu-upgrade-linux-image-5-8-0-44-lowlatency
- ubuntu-upgrade-linux-image-aws
- ubuntu-upgrade-linux-image-aws-hwe
- ubuntu-upgrade-linux-image-aws-lts-18-04
- ubuntu-upgrade-linux-image-azure
- ubuntu-upgrade-linux-image-azure-lts-18-04
- ubuntu-upgrade-linux-image-dell300x
- ubuntu-upgrade-linux-image-gcp
- ubuntu-upgrade-linux-image-gcp-lts-18-04
- ubuntu-upgrade-linux-image-generic
- ubuntu-upgrade-linux-image-generic-64k
- ubuntu-upgrade-linux-image-generic-64k-hwe-20-04
- ubuntu-upgrade-linux-image-generic-hwe-16-04
- ubuntu-upgrade-linux-image-generic-hwe-18-04
- ubuntu-upgrade-linux-image-generic-hwe-20-04
- ubuntu-upgrade-linux-image-generic-lpae
- ubuntu-upgrade-linux-image-generic-lpae-hwe-16-04
- ubuntu-upgrade-linux-image-generic-lpae-hwe-18-04
- ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04
- ubuntu-upgrade-linux-image-generic-lpae-lts-xenial
- ubuntu-upgrade-linux-image-generic-lts-xenial
- ubuntu-upgrade-linux-image-gke
- ubuntu-upgrade-linux-image-gke-4-15
- ubuntu-upgrade-linux-image-gke-5-4
- ubuntu-upgrade-linux-image-gkeop
- ubuntu-upgrade-linux-image-gkeop-5-4
- ubuntu-upgrade-linux-image-kvm
- ubuntu-upgrade-linux-image-lowlatency
- ubuntu-upgrade-linux-image-lowlatency-hwe-16-04
- ubuntu-upgrade-linux-image-lowlatency-hwe-18-04
- ubuntu-upgrade-linux-image-lowlatency-hwe-20-04
- ubuntu-upgrade-linux-image-lowlatency-lts-xenial
- ubuntu-upgrade-linux-image-oem
- ubuntu-upgrade-linux-image-oem-20-04
- ubuntu-upgrade-linux-image-oem-osp1
- ubuntu-upgrade-linux-image-oracle
- ubuntu-upgrade-linux-image-oracle-lts-18-04
- ubuntu-upgrade-linux-image-powerpc-e500mc
- ubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenial
- ubuntu-upgrade-linux-image-powerpc-smp
- ubuntu-upgrade-linux-image-powerpc-smp-lts-xenial
- ubuntu-upgrade-linux-image-powerpc64-emb
- ubuntu-upgrade-linux-image-powerpc64-emb-lts-xenial
- ubuntu-upgrade-linux-image-powerpc64-smp
- ubuntu-upgrade-linux-image-powerpc64-smp-lts-xenial
- ubuntu-upgrade-linux-image-raspi
- ubuntu-upgrade-linux-image-raspi-hwe-18-04
- ubuntu-upgrade-linux-image-raspi-nolpae
- ubuntu-upgrade-linux-image-raspi2
- ubuntu-upgrade-linux-image-server
- ubuntu-upgrade-linux-image-snapdragon
- ubuntu-upgrade-linux-image-snapdragon-hwe-18-04
- ubuntu-upgrade-linux-image-virtual
- ubuntu-upgrade-linux-image-virtual-hwe-16-04
- ubuntu-upgrade-linux-image-virtual-hwe-18-04
- ubuntu-upgrade-linux-image-virtual-hwe-20-04
- ubuntu-upgrade-linux-image-virtual-lts-xenial
Advanced vulnerability management analytics and reporting.
Key Features
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center