Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.3
CVE-2021-38205: Linux Kernel: Exposes Sensitive Information to Attackers
CVE-2021-38205 · published 5 years ago
Summary
An older version of the Linux kernel exposes sensitive information that could be used by attackers to bypass a security feature. This affects Linux systems before version 5.13.3. To stay secure, update your Linux kernel to the latest version.
What to do
- Update canonical linux-azure to version 4.15.0-1124.137~14.04.1.
- Update canonical linux-aws-hwe to version 4.15.0-1112.119~16.04.1.
- Update canonical linux-azure to version 4.15.0-1124.137~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1109.123~16.04.1.
- Update canonical linux-hwe to version 4.15.0-159.167~16.04.1.
- Update canonical linux-oracle to version 4.15.0-1081.89~16.04.1.
- Update canonical linux to version 4.15.0-159.167.
- Update canonical linux-aws to version 4.15.0-1112.119.
- Update canonical linux-aws-5.4 to version 5.4.0-1058.61~18.04.3.
- Update canonical linux-azure-4.15 to version 4.15.0-1124.137.
- Update canonical linux-azure-5.4 to version 5.4.0-1062.65~18.04.1.
- Update canonical linux-dell300x to version 4.15.0-1028.33.
- Update canonical linux-gcp-4.15 to version 4.15.0-1109.123.
- Update canonical linux-gcp-5.4 to version 5.4.0-1056.60~18.04.1.
- Update canonical linux-gke-5.4 to version 5.4.0-1054.57~18.04.1.
- Update canonical linux-gkeop-5.4 to version 5.4.0-1025.26~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-89.100~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1100.102.
- Update canonical linux-oracle to version 4.15.0-1081.89.
- Update canonical linux-oracle-5.4 to version 5.4.0-1056.60~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1045.49~18.04.1.
- Update canonical linux-raspi2 to version 4.15.0-1096.102.
- Update canonical linux-snapdragon to version 4.15.0-1113.122.
- Update canonical linux-aws-fips to version 4.15.0-2054.56.
- Update canonical linux-azure-fips to version 4.15.0-2036.40.
- Update canonical linux-fips to version 4.15.0-1070.79.
- Update canonical linux-gcp-fips to version 4.15.0-2019.21.
- Update canonical linux to version 5.4.0-89.100.
- Update canonical linux-aws to version 5.4.0-1058.61.
- Update canonical linux-aws-5.11 to version 5.11.0-1019.20~20.04.1.
- Update canonical linux-azure to version 5.4.0-1062.65.
- Update canonical linux-azure-5.11 to version 5.11.0-1017.18~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1020.23.
- Update canonical linux-gcp to version 5.4.0-1056.60.
- Update canonical linux-gcp-5.11 to version 5.11.0-1020.22~20.04.1.
- Update canonical linux-gke to version 5.4.0-1054.57.
- Update canonical linux-gkeop to version 5.4.0-1025.26.
- Update canonical linux-hwe-5.11 to version 5.11.0-37.41~20.04.2.
- Update canonical linux-ibm to version 5.4.0-1006.7.
- Update canonical linux-kvm to version 5.4.0-1048.50.
- Update canonical linux-oem-5.10 to version 5.10.0-1050.52.
- Update canonical linux-oem-5.13 to version 5.13.0-1014.18.
- Update canonical linux-oracle to version 5.4.0-1056.60.
- Update canonical linux-oracle-5.11 to version 5.11.0-1019.20~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1045.49.
- Update canonical linux-riscv-5.11 to version 5.11.0-1020.21~20.04.1.
- Update canonical linux-aws-fips to version 5.4.0-1069.73+fips2.
- Update canonical linux-azure-fips to version 5.4.0-1073.76+fips1.
- Update canonical linux-fips to version 5.4.0-1035.41.
- Update canonical linux-gcp-fips to version 5.4.0-1067.71~20.04.1.
- Update debian linux to version 5.14.6-1.
- Update linux linux_kernel to version 5.13.3 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1124.137~14.04.1 Fix: upgrade to 4.15.0-1124.137~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1112.119~16.04.1 Fix: upgrade to 4.15.0-1112.119~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1124.137~16.04.1 Fix: upgrade to 4.15.0-1124.137~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1109.123~16.04.1 Fix: upgrade to 4.15.0-1109.123~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-159.167~16.04.1 Fix: upgrade to 4.15.0-159.167~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1081.89~16.04.1 Fix: upgrade to 4.15.0-1081.89~16.04.1
|
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-159.167 Fix: upgrade to 4.15.0-159.167
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1112.119 Fix: upgrade to 4.15.0-1112.119
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1058.61~18.04.3 Fix: upgrade to 5.4.0-1058.61~18.04.3
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1124.137 Fix: upgrade to 4.15.0-1124.137
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1062.65~18.04.1 Fix: upgrade to 5.4.0-1062.65~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-dell300x |
< 4.15.0-1028.33 Fix: upgrade to 4.15.0-1028.33
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1109.123 Fix: upgrade to 4.15.0-1109.123
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1056.60~18.04.1 Fix: upgrade to 5.4.0-1056.60~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 |
< 5.4.0-1054.57~18.04.1 Fix: upgrade to 5.4.0-1054.57~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 |
< 5.4.0-1025.26~18.04.1 Fix: upgrade to 5.4.0-1025.26~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-89.100~18.04.1 Fix: upgrade to 5.4.0-89.100~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1100.102 Fix: upgrade to 4.15.0-1100.102
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1081.89 Fix: upgrade to 4.15.0-1081.89
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1056.60~18.04.1 Fix: upgrade to 5.4.0-1056.60~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1045.49~18.04.1 Fix: upgrade to 5.4.0-1045.49~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi2 |
< 4.15.0-1096.102 Fix: upgrade to 4.15.0-1096.102
|
| Ubuntu:18.04:LTS | canonical | linux-snapdragon |
< 4.15.0-1113.122 Fix: upgrade to 4.15.0-1113.122
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2054.56 Fix: upgrade to 4.15.0-2054.56
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2036.40 Fix: upgrade to 4.15.0-2036.40
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1070.79 Fix: upgrade to 4.15.0-1070.79
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2019.21 Fix: upgrade to 4.15.0-2019.21
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
Showing 50 of 96. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-89.100 Fix: upgrade to 5.4.0-89.100
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1058.61 Fix: upgrade to 5.4.0-1058.61
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 |
< 5.11.0-1019.20~20.04.1 Fix: upgrade to 5.11.0-1019.20~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1062.65 Fix: upgrade to 5.4.0-1062.65
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 |
< 5.11.0-1017.18~20.04.1 Fix: upgrade to 5.11.0-1017.18~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1020.23 Fix: upgrade to 5.4.0-1020.23
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1056.60 Fix: upgrade to 5.4.0-1056.60
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 |
< 5.11.0-1020.22~20.04.1 Fix: upgrade to 5.11.0-1020.22~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gke |
< 5.4.0-1054.57 Fix: upgrade to 5.4.0-1054.57
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1025.26 Fix: upgrade to 5.4.0-1025.26
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 |
< 5.11.0-37.41~20.04.2 Fix: upgrade to 5.11.0-37.41~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1006.7 Fix: upgrade to 5.4.0-1006.7
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1048.50 Fix: upgrade to 5.4.0-1048.50
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 |
< 5.10.0-1050.52 Fix: upgrade to 5.10.0-1050.52
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 |
< 5.13.0-1014.18 Fix: upgrade to 5.13.0-1014.18
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1056.60 Fix: upgrade to 5.4.0-1056.60
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 |
< 5.11.0-1019.20~20.04.1 Fix: upgrade to 5.11.0-1019.20~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1045.49 Fix: upgrade to 5.4.0-1045.49
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 |
< 5.11.0-1020.21~20.04.1 Fix: upgrade to 5.11.0-1020.21~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1069.73+fips2 Fix: upgrade to 5.4.0-1069.73+fips2
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1073.76+fips1 Fix: upgrade to 5.4.0-1073.76+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1035.41 Fix: upgrade to 5.4.0-1035.41
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1067.71~20.04.1 Fix: upgrade to 5.4.0-1067.71~20.04.1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:26.04 | canonical | linux-nvidia | All versions |
| – | linux | linux_kernel |
< 5.13.3 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | debian | debian_linux |
9.0 cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Debian:12 | debian | linux |
< 5.14.6-1 Fix: upgrade to 5.14.6-1
|
Original advisory text
drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the re...
drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real IOMEM pointer).
References
- https://ubuntu.com/security/CVE-2021-38205 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html Mailing List Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html Mailing List Third Party Advisory
- https://github.com/torvalds/linux/commit/d0d62baa7f505bd4c59cd169692ff07ec49dde3... Third Party Advisory
- https://ubuntu.com/security/notices/USN-5115-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5116-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5116-2 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2021-38205 Vendor Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3 Third Party Advisory
- https://ubuntu.com/security/notices/USN-5092-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5092-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5094-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5096-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5094-2 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2021-38205 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-824Access of Uninitialized Pointer
Timeline
Published8 Aug 2021
Updated31 Oct 2026
First seen12 May 2026
Track software like this
Free during beta