[USN-6030-1] Linux kernel (Qualcomm Snapdragon) vulnerabilities
Several security issues were fixed in the Linux kernel.
It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel contained a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2023-1281)
It was discovered that the System V IPC implementation in the Linux kernel
did not properly handle large shared memory counts. A local attacker could
use this to cause a denial of service (memory exhaustion). (CVE-2021-3669)
It was discovered that a use-after-free vulnerability existed in the SGI
GRU driver in the Linux kernel. A local attacker could possibly use this to
cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2022-3424)
Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux
kernel contained an out-of-bounds write vulnerability. A local attacker
could use this to cause a denial of service (system crash).
(CVE-2022-36280)
It was discovered that the infrared transceiver USB driver did not properly
handle USB control messages. A local attacker with physical access could
plug in a specially crafted USB device to cause a denial of service (memory
exhaustion). (CVE-2022-3903)
Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel did not
properly perform reference counting in some situations, leading to a use-
after-free vulnerability. A local attacker could use this to cause a denial
of service (system crash) or possibly execute arbitrary code.
(CVE-2022-41218)
It was discovered that the network queuing discipline implementation in the
Linux kernel contained a null pointer dereference in some situations. A
local attacker could use this to cause a denial of service (system crash).
(CVE-2022-47929)
José Oliveira and Rodrigo Branco discovered that the prctl syscall
implementation in the Linux kernel did not properly protect against
indirect branch prediction attacks in some situations. A local attacker
could possibly use this to expose sensitive information. (CVE-2023-0045)
It was discovered that a use-after-free vulnerability existed in the
Advanced Linux Sound Architecture (ALSA) subsystem. A local attacker could
use this to cause a denial of service (system crash). (CVE-2023-0266)
Kyle Zeng discovered that the IPv6 implementation in the Linux kernel
contained a NULL pointer dereference vulnerability in certain situations. A
local attacker could use this to cause a denial of service (system crash).
(CVE-2023-0394)
It was discovered that the Human Interface Device (HID) support driver in
the Linux kernel contained a type confusion vulnerability in some
situations. A local attacker could use this to cause a denial of service
(system crash). (CVE-2023-1073)
It was discovered that a memory leak existed in the SCTP protocol
implementation in the Linux kernel. A local attacker could use this to
cause a denial of service (memory exhaustion). (CVE-2023-1074)
Kyle Zeng discovered that the ATM VC queuing discipline implementation in
the Linux kernel contained a type confusion vulnerability in some
situations. An attacker could use this to cause a denial of service (system
crash). (CVE-2023-23455)
It was discovered that the RNDIS USB driver in the Linux kernel contained
an integer overflow vulnerability. A local attacker with physical access
could plug in a malicious USB device to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2023-23559)
Lianhui Tang discovered that the MPLS implementation in the Linux kernel
did not properly handle certain sysctl allocation failure conditions,
leading to a double-free vulnerability. An attacker could use this to cause
a denial of service or possibly execute arbitrary code. (CVE-2023-26545)
Wei Chen discovered that the DVB USB AZ6027 driver in the Linux kernel
contained a null pointer dereference when handling certain messages from
user space. A local attacker could use this to cause a denial of service
(system crash). (CVE-2023-28328)
Package | Affected Version |
---|---|
pkg:deb/ubuntu/linux-tools-snapdragon?distro=bionic | < 4.15.0.1148.147 |
pkg:deb/ubuntu/linux-tools-4.15.0-1148-snapdragon?distro=bionic | < 4.15.0-1148.158 |
pkg:deb/ubuntu/linux-snapdragon?distro=bionic | < 4.15.0.1148.147 |
pkg:deb/ubuntu/linux-snapdragon-tools-4.15.0-1148?distro=bionic | < 4.15.0-1148.158 |
pkg:deb/ubuntu/linux-snapdragon-headers-4.15.0-1148?distro=bionic | < 4.15.0-1148.158 |
pkg:deb/ubuntu/linux-modules-4.15.0-1148-snapdragon?distro=bionic | < 4.15.0-1148.158 |
pkg:deb/ubuntu/linux-image-snapdragon?distro=bionic | < 4.15.0.1148.147 |
pkg:deb/ubuntu/linux-image-4.15.0-1148-snapdragon?distro=bionic | < 4.15.0-1148.158 |
pkg:deb/ubuntu/linux-headers-snapdragon?distro=bionic | < 4.15.0.1148.147 |
pkg:deb/ubuntu/linux-headers-4.15.0-1148-snapdragon?distro=bionic | < 4.15.0-1148.158 |
pkg:deb/ubuntu/linux-buildinfo-4.15.0-1148-snapdragon?distro=bionic | < 4.15.0-1148.158 |
- ID
- USN-6030-1
- Severity
- high
- Severity from
- CVE-2022-3424
- URL
- https://ubuntu.com/security/notices/USN-6030-1
- Published
-
2023-04-19T14:15:33
(17 months ago) - Modified
-
2023-04-19T14:15:33
(17 months ago) - Other Advisories
-
- ALAS-2023-1701
- ALAS-2023-1706
- ALAS2-2023-1932
- ALAS2-2023-1987
- ALAS2-2024-2448
- ALSA-2022:1988
- ALSA-2023:1470
- ALSA-2023:1566
- ALSA-2023:2458
- ALSA-2023:2951
- ALSA-2023:4517
- ALSA-2023:7077
- ALSA-2024:0897
- CISA-2023:0330
- DSA-5324-1
- ELSA-2022-1988
- ELSA-2022-9828
- ELSA-2022-9829
- ELSA-2023-12160
- ELSA-2023-12196
- ELSA-2023-12199
- ELSA-2023-12200
- ELSA-2023-12206
- ELSA-2023-12207
- ELSA-2023-12232
- ELSA-2023-12242
- ELSA-2023-12243
- ELSA-2023-12255
- ELSA-2023-12256
- ELSA-2023-12323
- ELSA-2023-12375
- ELSA-2023-12565
- ELSA-2023-12688
- ELSA-2023-1470
- ELSA-2023-1566
- ELSA-2023-2458
- ELSA-2023-2951
- ELSA-2023-4517
- ELSA-2023-6583
- ELSA-2023-7077
- ELSA-2024-0897
- ELSA-2024-12169
- MS:CVE-2021-3669
- MS:CVE-2022-41218
- MS:CVE-2022-47929
- MS:CVE-2023-0266
- MS:CVE-2023-0394
- MS:CVE-2023-23455
- MS:CVE-2023-23559
- MS:CVE-2023-26545
- openSUSE-SU-2021:1357-1
- openSUSE-SU-2021:1365-1
- openSUSE-SU-2021:3338-1
- openSUSE-SU-2021:3387-1
- openSUSE-SU-2021:3447-1
- RHSA-2022:1975
- RHSA-2022:1988
- RHSA-2023:1469
- RHSA-2023:1470
- RHSA-2023:1471
- RHSA-2023:1566
- RHSA-2023:1584
- RHSA-2023:1659
- RHSA-2023:2148
- RHSA-2023:2458
- RHSA-2023:2736
- RHSA-2023:2951
- RHSA-2023:4517
- RHSA-2023:4531
- RHSA-2023:4541
- RHSA-2023:6901
- RHSA-2023:7077
- RHSA-2024:0881
- RHSA-2024:0897
- RLSA-2022:1988
- RLSA-2023:1470
- RLSA-2023:1566
- RLSA-2023:4517
- SSA:2023-048-01
- SSA:2023-172-02
- SUSE-SU-2021:3337-1
- SUSE-SU-2021:3338-1
- SUSE-SU-2021:3339-1
- SUSE-SU-2021:3387-1
- SUSE-SU-2021:3415-1
- SUSE-SU-2021:3447-1
- SUSE-SU-2022:3584-1
- SUSE-SU-2022:3585-1
- SUSE-SU-2022:3586-1
- SUSE-SU-2022:3587-1
- SUSE-SU-2022:3599-1
- SUSE-SU-2022:3609-1
- SUSE-SU-2022:3688-1
- SUSE-SU-2022:3693-1
- SUSE-SU-2022:3704-1
- SUSE-SU-2022:3775-1
- SUSE-SU-2022:3779-1
- SUSE-SU-2022:3809-1
- SUSE-SU-2022:3810-1
- SUSE-SU-2022:3844-1
- SUSE-SU-2022:3897-1
- SUSE-SU-2022:3929-1
- SUSE-SU-2022:3998-1
- SUSE-SU-2022:4053-1
- SUSE-SU-2022:4072-1
- SUSE-SU-2022:4272-1
- SUSE-SU-2022:4273-1
- SUSE-SU-2022:4503-1
- SUSE-SU-2022:4504-1
- SUSE-SU-2022:4505-1
- SUSE-SU-2022:4506-1
- SUSE-SU-2022:4513-1
- SUSE-SU-2022:4516-1
- SUSE-SU-2022:4518-1
- SUSE-SU-2022:4520-1
- SUSE-SU-2022:4527-1
- SUSE-SU-2022:4528-1
- SUSE-SU-2022:4533-1
- SUSE-SU-2022:4534-1
- SUSE-SU-2022:4543-1
- SUSE-SU-2022:4544-1
- SUSE-SU-2022:4545-1
- SUSE-SU-2022:4550-1
- SUSE-SU-2022:4551-1
- SUSE-SU-2022:4559-1
- SUSE-SU-2022:4561-1
- SUSE-SU-2022:4562-1
- SUSE-SU-2022:4566-1
- SUSE-SU-2022:4569-1
- SUSE-SU-2022:4573-1
- SUSE-SU-2022:4574-1
- SUSE-SU-2022:4577-1
- SUSE-SU-2022:4580-1
- SUSE-SU-2022:4585-1
- SUSE-SU-2022:4587-1
- SUSE-SU-2022:4589-1
- SUSE-SU-2022:4595-1
- SUSE-SU-2022:4611-1
- SUSE-SU-2022:4613-1
- SUSE-SU-2022:4614-1
- SUSE-SU-2022:4615-1
- SUSE-SU-2022:4616-1
- SUSE-SU-2022:4617-1
- SUSE-SU-2023:0145-1
- SUSE-SU-2023:0152-1
- SUSE-SU-2023:0226-1
- SUSE-SU-2023:0227-1
- SUSE-SU-2023:0229-1
- SUSE-SU-2023:0231-1
- SUSE-SU-2023:0235-1
- SUSE-SU-2023:0237-1
- SUSE-SU-2023:0238-1
- SUSE-SU-2023:0240-1
- SUSE-SU-2023:0245-1
- SUSE-SU-2023:0250-1
- SUSE-SU-2023:0262-1
- SUSE-SU-2023:0263-1
- SUSE-SU-2023:0267-1
- SUSE-SU-2023:0270-1
- SUSE-SU-2023:0271-1
- SUSE-SU-2023:0277-1
- SUSE-SU-2023:0281-1
- SUSE-SU-2023:0331-1
- SUSE-SU-2023:0394-1
- SUSE-SU-2023:0406-1
- SUSE-SU-2023:0407-1
- SUSE-SU-2023:0410-1
- SUSE-SU-2023:0416-1
- SUSE-SU-2023:0420-1
- SUSE-SU-2023:0433-1
- SUSE-SU-2023:0485-1
- SUSE-SU-2023:0488-1
- SUSE-SU-2023:0591-1
- SUSE-SU-2023:0618-1
- SUSE-SU-2023:0634-1
- SUSE-SU-2023:0747-1
- SUSE-SU-2023:0749-1
- SUSE-SU-2023:0749-2
- SUSE-SU-2023:0762-1
- SUSE-SU-2023:0767-1
- SUSE-SU-2023:0768-1
- SUSE-SU-2023:0770-1
- SUSE-SU-2023:0774-1
- SUSE-SU-2023:0778-1
- SUSE-SU-2023:0779-1
- SUSE-SU-2023:0780-1
- SUSE-SU-2023:0796-1
- SUSE-SU-2023:0852-1
- SUSE-SU-2023:1574-1
- SUSE-SU-2023:1576-1
- SUSE-SU-2023:1579-1
- SUSE-SU-2023:1588-1
- SUSE-SU-2023:1591-1
- SUSE-SU-2023:1592-1
- SUSE-SU-2023:1595-1
- SUSE-SU-2023:1599-1
- SUSE-SU-2023:1602-1
- SUSE-SU-2023:1605-1
- SUSE-SU-2023:1608-1
- SUSE-SU-2023:1609-1
- SUSE-SU-2023:1619-1
- SUSE-SU-2023:1621-1
- SUSE-SU-2023:1635-1
- SUSE-SU-2023:1639-1
- SUSE-SU-2023:1640-1
- SUSE-SU-2023:1647-1
- SUSE-SU-2023:1649-1
- SUSE-SU-2023:1651-1
- SUSE-SU-2023:1653-1
- SUSE-SU-2023:1654-1
- SUSE-SU-2023:1708-1
- SUSE-SU-2023:1710-1
- SUSE-SU-2023:1800-1
- SUSE-SU-2023:1801-1
- SUSE-SU-2023:1802-1
- SUSE-SU-2023:1803-1
- SUSE-SU-2023:1811-1
- SUSE-SU-2023:1848-1
- SUSE-SU-2023:1892-1
- SUSE-SU-2023:1894-1
- SUSE-SU-2023:1897-1
- SUSE-SU-2023:1992-1
- SUSE-SU-2023:2232-1
- SUSE-SU-2023:2369-1
- SUSE-SU-2023:2371-1
- SUSE-SU-2023:2376-1
- SUSE-SU-2023:2384-1
- SUSE-SU-2023:2389-1
- SUSE-SU-2023:2399-1
- SUSE-SU-2023:2405-1
- SUSE-SU-2023:2415-1
- SUSE-SU-2023:2416-1
- SUSE-SU-2023:2423-1
- SUSE-SU-2023:2425-1
- SUSE-SU-2023:2431-1
- SUSE-SU-2023:2442-1
- SUSE-SU-2023:2443-1
- SUSE-SU-2023:2448-1
- SUSE-SU-2023:2453-1
- SUSE-SU-2023:2455-1
- SUSE-SU-2023:2459-1
- SUSE-SU-2023:2468-1
- SUSE-SU-2023:2506-1
- SUSE-SU-2023:2646-1
- SUSE-SU-2023:2660-1
- SUSE-SU-2023:2679-1
- SUSE-SU-2023:2680-1
- SUSE-SU-2023:2686-1
- SUSE-SU-2023:2694-1
- SUSE-SU-2023:2695-1
- SUSE-SU-2023:2702-1
- SUSE-SU-2023:2708-1
- SUSE-SU-2023:2710-1
- SUSE-SU-2023:2714-1
- SUSE-SU-2023:2718-1
- SUSE-SU-2023:2721-1
- SUSE-SU-2023:2727-1
- SUSE-SU-2023:2735-1
- SUSE-SU-2023:2741-1
- SUSE-SU-2023:2743-1
- SUSE-SU-2023:2755-1
- SUSE-SU-2023:2805-1
- SUSE-SU-2023:2809-1
- SUSE-SU-2023:2871-1
- SUSE-SU-2023:4031-1
- SUSE-SU-2023:4135-1
- SUSE-SU-2023:4136-1
- SUSE-SU-2023:4158-1
- SUSE-SU-2023:4159-1
- SUSE-SU-2023:4160-1
- SUSE-SU-2023:4273-1
- SUSE-SU-2023:4280-1
- SUSE-SU-2023:4319-1
- SUSE-SU-2024:0155-1
- USN-5856-1
- USN-5884-1
- USN-5913-1
- USN-5914-1
- USN-5915-1
- USN-5917-1
- USN-5924-1
- USN-5926-1
- USN-5927-1
- USN-5934-1
- USN-5939-1
- USN-5940-1
- USN-5951-1
- USN-5970-1
- USN-5975-1
- USN-5976-1
- USN-5977-1
- USN-5978-1
- USN-5979-1
- USN-5980-1
- USN-5981-1
- USN-5982-1
- USN-5984-1
- USN-5985-1
- USN-5987-1
- USN-5991-1
- USN-6000-1
- USN-6001-1
- USN-6004-1
- USN-6009-1
- USN-6013-1
- USN-6014-1
- USN-6020-1
- USN-6024-1
- USN-6025-1
- USN-6027-1
- USN-6029-1
- USN-6031-1
- USN-6032-1
- USN-6040-1
- USN-6057-1
- USN-6071-1
- USN-6072-1
- USN-6079-1
- USN-6091-1
- USN-6093-1
- USN-6096-1
- USN-6134-1
- USN-6149-1
- USN-6151-1
- USN-6174-1
- USN-6222-1
- USN-6235-1
- USN-6247-1
- USN-6248-1
- USN-6256-1
- USN-6385-1
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:deb/ubuntu/linux-tools-snapdragon?distro=bionic | ubuntu | linux-tools-snapdragon | < 4.15.0.1148.147 | bionic | ||
Affected | pkg:deb/ubuntu/linux-tools-4.15.0-1148-snapdragon?distro=bionic | ubuntu | linux-tools-4.15.0-1148-snapdragon | < 4.15.0-1148.158 | bionic | ||
Affected | pkg:deb/ubuntu/linux-snapdragon?distro=bionic | ubuntu | linux-snapdragon | < 4.15.0.1148.147 | bionic | ||
Affected | pkg:deb/ubuntu/linux-snapdragon-tools-4.15.0-1148?distro=bionic | ubuntu | linux-snapdragon-tools-4.15.0-1148 | < 4.15.0-1148.158 | bionic | ||
Affected | pkg:deb/ubuntu/linux-snapdragon-headers-4.15.0-1148?distro=bionic | ubuntu | linux-snapdragon-headers-4.15.0-1148 | < 4.15.0-1148.158 | bionic | ||
Affected | pkg:deb/ubuntu/linux-modules-4.15.0-1148-snapdragon?distro=bionic | ubuntu | linux-modules-4.15.0-1148-snapdragon | < 4.15.0-1148.158 | bionic | ||
Affected | pkg:deb/ubuntu/linux-image-snapdragon?distro=bionic | ubuntu | linux-image-snapdragon | < 4.15.0.1148.147 | bionic | ||
Affected | pkg:deb/ubuntu/linux-image-4.15.0-1148-snapdragon?distro=bionic | ubuntu | linux-image-4.15.0-1148-snapdragon | < 4.15.0-1148.158 | bionic | ||
Affected | pkg:deb/ubuntu/linux-headers-snapdragon?distro=bionic | ubuntu | linux-headers-snapdragon | < 4.15.0.1148.147 | bionic | ||
Affected | pkg:deb/ubuntu/linux-headers-4.15.0-1148-snapdragon?distro=bionic | ubuntu | linux-headers-4.15.0-1148-snapdragon | < 4.15.0-1148.158 | bionic | ||
Affected | pkg:deb/ubuntu/linux-buildinfo-4.15.0-1148-snapdragon?distro=bionic | ubuntu | linux-buildinfo-4.15.0-1148-snapdragon | < 4.15.0-1148.158 | bionic |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |