USN-5985-1: Linux kernel vulnerabilities

It was discovered that the System V IPC implementation in the Linux kernel
did not properly handle large shared memory counts. A local attacker could
use this to cause a denial of service (memory exhaustion). (CVE-2021-3669)

It was discovered that the KVM VMX implementation in the Linux kernel did
not properly handle indirect branch prediction isolation between L1 and L2
VMs. An attacker in a guest VM could use this to expose sensitive
information from the host OS or other …

cve denial of service exhaustion file system gadget host information ipc isolation kernel large lee linux linux kernel local memory prediction sensitive information service system usb usn vms vmx vulnerabilities