Advanced

Canonical Releases Major Ubuntu Kernel Updates to Address 14 Vulnerabilities

Posted by hanuca on · Post a comment
9to5Linux; By Marius Nestor
Mail this story
Print this story

Canonical released today major Linux kernel updates for all supported Ubuntu releases to address multiple security vulnerabilities discovered by various security researchers.

A total of 14 security vulnerabilities have been fixed in these new major Ubuntu kernel updates, including a race condition (CVE-2020-0423) that may lead to a use-after-free vulnerability, discovered in Linux kernel’s binder IPC implementation. This flaw affects Ubuntu 20.10, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS systems, and could allow a local attacker to cause a denial of service (system crash) or possibly execute arbitrary code.

Affecting all supported Ubuntu releases, this kernel update addresses a Bluetooth security vulnerability (CVE-2020-10135) discovered by Daniele Antonioli, Nils Ole Tippenhauer, and Kasper Rasmussen, which could allow a physically proximate attacker to impersonate a previously paired Bluetooth device.

Full Story

  Nav
» Read more about: Story Type: News Story; Groups: Kernel, Linux, Ubuntu

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments

No comments yet. Be the first.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post