[USN-5977-1] Linux kernel (OEM) vulnerabilities

Severity High

Affected Packages 19

CVEs 3

Several security issues were fixed in the Linux kernel.

It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel contained a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2023-1281)

It was discovered that the KVM VMX implementation in the Linux kernel did
not properly handle indirect branch prediction isolation between L1 and L2
VMs. An attacker in a guest VM could use this to expose sensitive
information from the host OS or other guest VMs. (CVE-2022-2196)

Thadeu Cascardo discovered that the io_uring subsystem contained a double-
free vulnerability in certain memory allocation error conditions. A local
attacker could possibly use this to cause a denial of service (system
crash). (CVE-2023-1032)

Package	Affected Version
pkg:deb/ubuntu/linux-tools-oem-22.04b?distro=jammy	< 6.0.0.1013.13
pkg:deb/ubuntu/linux-tools-6.0.0-1013-oem?distro=jammy	< 6.0.0-1013.13
pkg:deb/ubuntu/linux-oem-6.0-tools-host?distro=jammy	< 6.0.0-1013.13
pkg:deb/ubuntu/linux-oem-6.0-tools-6.0.0-1013?distro=jammy	< 6.0.0-1013.13
pkg:deb/ubuntu/linux-oem-6.0-headers-6.0.0-1013?distro=jammy	< 6.0.0-1013.13
pkg:deb/ubuntu/linux-oem-22.04b?distro=jammy	< 6.0.0.1013.13
pkg:deb/ubuntu/linux-modules-iwlwifi-oem-22.04b?distro=jammy	< 6.0.0.1013.13
pkg:deb/ubuntu/linux-modules-iwlwifi-6.0.0-1013-oem?distro=jammy	< 6.0.0-1013.13
pkg:deb/ubuntu/linux-modules-ivsc-oem-22.04b?distro=jammy	< 6.0.0.1013.13
pkg:deb/ubuntu/linux-modules-ivsc-6.0.0-1013-oem?distro=jammy	< 6.0.0-1013.13
pkg:deb/ubuntu/linux-modules-ipu6-oem-22.04b?distro=jammy	< 6.0.0.1013.13
pkg:deb/ubuntu/linux-modules-ipu6-6.0.0-1013-oem?distro=jammy	< 6.0.0-1013.13
pkg:deb/ubuntu/linux-modules-6.0.0-1013-oem?distro=jammy	< 6.0.0-1013.13
pkg:deb/ubuntu/linux-image-unsigned-6.0.0-1013-oem?distro=jammy	< 6.0.0-1013.13
pkg:deb/ubuntu/linux-image-oem-22.04b?distro=jammy	< 6.0.0.1013.13
pkg:deb/ubuntu/linux-image-6.0.0-1013-oem?distro=jammy	< 6.0.0-1013.13
pkg:deb/ubuntu/linux-headers-oem-22.04b?distro=jammy	< 6.0.0.1013.13
pkg:deb/ubuntu/linux-headers-6.0.0-1013-oem?distro=jammy	< 6.0.0-1013.13
pkg:deb/ubuntu/linux-buildinfo-6.0.0-1013-oem?distro=jammy	< 6.0.0-1013.13

ID

USN-5977-1

Severity

high

Severity from

CVE-2022-2196

URL

https://ubuntu.com/security/notices/USN-5977-1

Published

2023-03-27T22:38:10
(17 months ago)

Modified

2023-03-27T22:38:10
(17 months ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/linux-tools-oem-22.04b?distro=jammy	ubuntu	linux-tools-oem-22.04b	< 6.0.0.1013.13	jammy
Affected	pkg:deb/ubuntu/linux-tools-6.0.0-1013-oem?distro=jammy	ubuntu	linux-tools-6.0.0-1013-oem	< 6.0.0-1013.13	jammy
Affected	pkg:deb/ubuntu/linux-oem-6.0-tools-host?distro=jammy	ubuntu	linux-oem-6.0-tools-host	< 6.0.0-1013.13	jammy
Affected	pkg:deb/ubuntu/linux-oem-6.0-tools-6.0.0-1013?distro=jammy	ubuntu	linux-oem-6.0-tools-6.0.0-1013	< 6.0.0-1013.13	jammy
Affected	pkg:deb/ubuntu/linux-oem-6.0-headers-6.0.0-1013?distro=jammy	ubuntu	linux-oem-6.0-headers-6.0.0-1013	< 6.0.0-1013.13	jammy
Affected	pkg:deb/ubuntu/linux-oem-22.04b?distro=jammy	ubuntu	linux-oem-22.04b	< 6.0.0.1013.13	jammy
Affected	pkg:deb/ubuntu/linux-modules-iwlwifi-oem-22.04b?distro=jammy	ubuntu	linux-modules-iwlwifi-oem-22.04b	< 6.0.0.1013.13	jammy
Affected	pkg:deb/ubuntu/linux-modules-iwlwifi-6.0.0-1013-oem?distro=jammy	ubuntu	linux-modules-iwlwifi-6.0.0-1013-oem	< 6.0.0-1013.13	jammy
Affected	pkg:deb/ubuntu/linux-modules-ivsc-oem-22.04b?distro=jammy	ubuntu	linux-modules-ivsc-oem-22.04b	< 6.0.0.1013.13	jammy
Affected	pkg:deb/ubuntu/linux-modules-ivsc-6.0.0-1013-oem?distro=jammy	ubuntu	linux-modules-ivsc-6.0.0-1013-oem	< 6.0.0-1013.13	jammy
Affected	pkg:deb/ubuntu/linux-modules-ipu6-oem-22.04b?distro=jammy	ubuntu	linux-modules-ipu6-oem-22.04b	< 6.0.0.1013.13	jammy
Affected	pkg:deb/ubuntu/linux-modules-ipu6-6.0.0-1013-oem?distro=jammy	ubuntu	linux-modules-ipu6-6.0.0-1013-oem	< 6.0.0-1013.13	jammy
Affected	pkg:deb/ubuntu/linux-modules-6.0.0-1013-oem?distro=jammy	ubuntu	linux-modules-6.0.0-1013-oem	< 6.0.0-1013.13	jammy
Affected	pkg:deb/ubuntu/linux-image-unsigned-6.0.0-1013-oem?distro=jammy	ubuntu	linux-image-unsigned-6.0.0-1013-oem	< 6.0.0-1013.13	jammy
Affected	pkg:deb/ubuntu/linux-image-oem-22.04b?distro=jammy	ubuntu	linux-image-oem-22.04b	< 6.0.0.1013.13	jammy
Affected	pkg:deb/ubuntu/linux-image-6.0.0-1013-oem?distro=jammy	ubuntu	linux-image-6.0.0-1013-oem	< 6.0.0-1013.13	jammy
Affected	pkg:deb/ubuntu/linux-headers-oem-22.04b?distro=jammy	ubuntu	linux-headers-oem-22.04b	< 6.0.0.1013.13	jammy
Affected	pkg:deb/ubuntu/linux-headers-6.0.0-1013-oem?distro=jammy	ubuntu	linux-headers-6.0.0-1013-oem	< 6.0.0-1013.13	jammy
Affected	pkg:deb/ubuntu/linux-buildinfo-6.0.0-1013-oem?distro=jammy	ubuntu	linux-buildinfo-6.0.0-1013-oem	< 6.0.0-1013.13	jammy

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date