[USN-6031-1] Linux kernel (OEM) vulnerabilities
Several security issues were fixed in the Linux kernel.
It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel contained a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2023-1281)
It was discovered that the Integrity Measurement Architecture (IMA)
implementation in the Linux kernel did not properly enforce policy in
certain conditions. A privileged attacker could use this to bypass Kernel
lockdown restrictions. (CVE-2022-21505)
It was discovered that the infrared transceiver USB driver did not properly
handle USB control messages. A local attacker with physical access could
plug in a specially crafted USB device to cause a denial of service (memory
exhaustion). (CVE-2022-3903)
It was discovered that a race condition existed in the SMSC UFX USB driver
implementation in the Linux kernel, leading to a use-after-free
vulnerability. A physically proximate attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2022-41849)
Gerald Lee discovered that the USB Gadget file system implementation in the
Linux kernel contained a race condition, leading to a use-after-free
vulnerability in some situations. A local attacker could use this to cause
a denial of service (system crash) or possibly execute arbitrary code.
(CVE-2022-4382)
It was discovered that a memory leak existed in the SCTP protocol
implementation in the Linux kernel. A local attacker could use this to
cause a denial of service (memory exhaustion). (CVE-2023-1074)
Mingi Cho discovered that the netfilter subsystem in the Linux kernel did
not properly initialize a data structure, leading to a null pointer
dereference vulnerability. An attacker could use this to cause a denial of
service (system crash). (CVE-2023-1095)
It was discovered that the RNDIS USB driver in the Linux kernel contained
an integer overflow vulnerability. A local attacker with physical access
could plug in a malicious USB device to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2023-23559)
It was discovered that the NTFS file system implementation in the Linux
kernel did not properly validate attributes in certain situations, leading
to an out-of-bounds read vulnerability. A local attacker could possibly use
this to expose sensitive information (kernel memory). (CVE-2023-26607)
Duoming Zhou discovered that a race condition existed in the infrared
receiver/transceiver driver in the Linux kernel, leading to a use-after-
free vulnerability. A privileged attacker could use this to cause a denial
of service (system crash) or possibly execute arbitrary code.
(CVE-2023-1118)
- ID
- USN-6031-1
- Severity
- high
- Severity from
- CVE-2023-1118
- URL
- https://ubuntu.com/security/notices/USN-6031-1
- Published
-
2023-04-19T16:43:39
(17 months ago) - Modified
-
2023-04-19T16:43:39
(17 months ago) - Other Advisories
-
- ALAS-2022-1645
- ALAS-2023-1701
- ALAS-2023-1707
- ALAS2-2022-1838
- ALAS2-2022-1876
- ALAS2-2022-1903
- ALAS2-2023-1987
- ALSA-2023:2458
- ALSA-2023:4517
- ALSA-2023:7077
- ELSA-2022-9601
- ELSA-2022-9602
- ELSA-2022-9609
- ELSA-2022-9612
- ELSA-2022-9709
- ELSA-2022-9710
- ELSA-2023-12196
- ELSA-2023-12232
- ELSA-2023-12242
- ELSA-2023-12243
- ELSA-2023-12255
- ELSA-2023-12256
- ELSA-2023-12323
- ELSA-2023-12565
- ELSA-2023-12566
- ELSA-2023-2458
- ELSA-2023-4517
- ELSA-2023-6583
- ELSA-2023-7077
- MS:CVE-2022-41849
- MS:CVE-2023-1095
- MS:CVE-2023-1118
- MS:CVE-2023-23559
- RHSA-2022:7933
- RHSA-2022:8267
- RHSA-2023:2148
- RHSA-2023:2458
- RHSA-2023:2736
- RHSA-2023:2951
- RHSA-2023:4517
- RHSA-2023:4531
- RHSA-2023:4541
- RHSA-2023:6901
- RHSA-2023:7077
- RLSA-2023:4517
- SSA:2022-237-02
- SSA:2022-333-01
- SSA:2023-048-01
- SSA:2023-172-02
- SUSE-SU-2022:2722-1
- SUSE-SU-2022:2741-1
- SUSE-SU-2022:2803-1
- SUSE-SU-2022:2809-1
- SUSE-SU-2022:2875-1
- SUSE-SU-2022:2875-2
- SUSE-SU-2022:2892-1
- SUSE-SU-2022:2892-2
- SUSE-SU-2022:3585-1
- SUSE-SU-2022:3609-1
- SUSE-SU-2022:3704-1
- SUSE-SU-2022:3775-1
- SUSE-SU-2022:3809-1
- SUSE-SU-2022:3844-1
- SUSE-SU-2022:4503-1
- SUSE-SU-2022:4504-1
- SUSE-SU-2022:4505-1
- SUSE-SU-2022:4561-1
- SUSE-SU-2022:4566-1
- SUSE-SU-2022:4573-1
- SUSE-SU-2022:4574-1
- SUSE-SU-2022:4585-1
- SUSE-SU-2022:4589-1
- SUSE-SU-2022:4611-1
- SUSE-SU-2022:4613-1
- SUSE-SU-2022:4614-1
- SUSE-SU-2022:4615-1
- SUSE-SU-2022:4616-1
- SUSE-SU-2022:4617-1
- SUSE-SU-2023:0394-1
- SUSE-SU-2023:0416-1
- SUSE-SU-2023:0433-1
- SUSE-SU-2023:0488-1
- SUSE-SU-2023:0747-1
- SUSE-SU-2023:0749-1
- SUSE-SU-2023:0749-2
- SUSE-SU-2023:0762-1
- SUSE-SU-2023:0767-1
- SUSE-SU-2023:0768-1
- SUSE-SU-2023:0770-1
- SUSE-SU-2023:0774-1
- SUSE-SU-2023:0778-1
- SUSE-SU-2023:0779-1
- SUSE-SU-2023:0780-1
- SUSE-SU-2023:0796-1
- SUSE-SU-2023:0852-1
- SUSE-SU-2023:1608-1
- SUSE-SU-2023:1609-1
- SUSE-SU-2023:1710-1
- SUSE-SU-2023:1800-1
- SUSE-SU-2023:1801-1
- SUSE-SU-2023:1802-1
- SUSE-SU-2023:1803-1
- SUSE-SU-2023:1811-1
- SUSE-SU-2023:1848-1
- SUSE-SU-2023:1892-1
- SUSE-SU-2023:1894-1
- SUSE-SU-2023:1897-1
- SUSE-SU-2023:1971-1
- SUSE-SU-2023:1972-1
- SUSE-SU-2023:1973-1
- SUSE-SU-2023:1975-1
- SUSE-SU-2023:1977-1
- SUSE-SU-2023:1981-1
- SUSE-SU-2023:1982-1
- SUSE-SU-2023:1983-1
- SUSE-SU-2023:1992-1
- SUSE-SU-2023:1995-1
- SUSE-SU-2023:2007-1
- SUSE-SU-2023:2009-1
- SUSE-SU-2023:2023-1
- SUSE-SU-2023:2024-1
- SUSE-SU-2023:2031-1
- SUSE-SU-2023:2035-1
- SUSE-SU-2023:2043-1
- SUSE-SU-2023:2055-1
- SUSE-SU-2023:2232-1
- SUSE-SU-2023:2369-1
- SUSE-SU-2023:2371-1
- SUSE-SU-2023:2376-1
- SUSE-SU-2023:2384-1
- SUSE-SU-2023:2389-1
- SUSE-SU-2023:2399-1
- SUSE-SU-2023:2405-1
- SUSE-SU-2023:2415-1
- SUSE-SU-2023:2416-1
- SUSE-SU-2023:2423-1
- SUSE-SU-2023:2425-1
- SUSE-SU-2023:2431-1
- SUSE-SU-2023:2442-1
- SUSE-SU-2023:2443-1
- SUSE-SU-2023:2448-1
- SUSE-SU-2023:2453-1
- SUSE-SU-2023:2455-1
- SUSE-SU-2023:2459-1
- SUSE-SU-2023:2468-1
- SUSE-SU-2023:2506-1
- SUSE-SU-2023:2646-1
- SUSE-SU-2023:2805-1
- SUSE-SU-2023:2809-1
- SUSE-SU-2023:2871-1
- SUSE-SU-2023:4135-1
- SUSE-SU-2023:4136-1
- SUSE-SU-2023:4158-1
- SUSE-SU-2023:4159-1
- SUSE-SU-2023:4160-1
- SUSE-SU-2023:4273-1
- SUSE-SU-2023:4280-1
- SUSE-SU-2023:4319-1
- SUSE-SU-2024:0155-1
- USN-5793-1
- USN-5793-2
- USN-5793-3
- USN-5793-4
- USN-5851-1
- USN-5853-1
- USN-5854-1
- USN-5860-1
- USN-5861-1
- USN-5862-1
- USN-5865-1
- USN-5874-1
- USN-5875-1
- USN-5876-1
- USN-5877-1
- USN-5883-1
- USN-5884-1
- USN-5909-1
- USN-5918-1
- USN-5924-1
- USN-5926-1
- USN-5927-1
- USN-5970-1
- USN-5975-1
- USN-5977-1
- USN-5978-1
- USN-5979-1
- USN-5980-1
- USN-5981-1
- USN-5982-1
- USN-5984-1
- USN-5985-1
- USN-5987-1
- USN-5991-1
- USN-6000-1
- USN-6001-1
- USN-6004-1
- USN-6007-1
- USN-6009-1
- USN-6013-1
- USN-6014-1
- USN-6020-1
- USN-6024-1
- USN-6025-1
- USN-6027-1
- USN-6029-1
- USN-6030-1
- USN-6032-1
- USN-6033-1
- USN-6040-1
- USN-6057-1
- USN-6079-1
- USN-6080-1
- USN-6081-1
- USN-6084-1
- USN-6085-1
- USN-6090-1
- USN-6091-1
- USN-6092-1
- USN-6093-1
- USN-6094-1
- USN-6095-1
- USN-6096-1
- USN-6109-1
- USN-6118-1
- USN-6132-1
- USN-6133-1
- USN-6134-1
- USN-6151-1
- USN-6222-1
- USN-6256-1
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:deb/ubuntu/linux-tools-oem-22.04a?distro=jammy | ubuntu | linux-tools-oem-22.04a | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-tools-oem-22.04?distro=jammy | ubuntu | linux-tools-oem-22.04 | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-tools-5.17.0-1030-oem?distro=jammy | ubuntu | linux-tools-5.17.0-1030-oem | < 5.17.0-1030.31 | jammy | ||
Affected | pkg:deb/ubuntu/linux-oem-5.17-tools-host?distro=jammy | ubuntu | linux-oem-5.17-tools-host | < 5.17.0-1030.31 | jammy | ||
Affected | pkg:deb/ubuntu/linux-oem-5.17-tools-5.17.0-1030?distro=jammy | ubuntu | linux-oem-5.17-tools-5.17.0-1030 | < 5.17.0-1030.31 | jammy | ||
Affected | pkg:deb/ubuntu/linux-oem-5.17-headers-5.17.0-1030?distro=jammy | ubuntu | linux-oem-5.17-headers-5.17.0-1030 | < 5.17.0-1030.31 | jammy | ||
Affected | pkg:deb/ubuntu/linux-oem-22.04a?distro=jammy | ubuntu | linux-oem-22.04a | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-oem-22.04?distro=jammy | ubuntu | linux-oem-22.04 | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-iwlwifi-oem-22.04a?distro=jammy | ubuntu | linux-modules-iwlwifi-oem-22.04a | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-iwlwifi-oem-22.04?distro=jammy | ubuntu | linux-modules-iwlwifi-oem-22.04 | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-iwlwifi-5.17.0-1030-oem?distro=jammy | ubuntu | linux-modules-iwlwifi-5.17.0-1030-oem | < 5.17.0-1030.31 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-ivsc-oem-22.04a?distro=jammy | ubuntu | linux-modules-ivsc-oem-22.04a | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-ivsc-oem-22.04?distro=jammy | ubuntu | linux-modules-ivsc-oem-22.04 | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-ivsc-5.17.0-1030-oem?distro=jammy | ubuntu | linux-modules-ivsc-5.17.0-1030-oem | < 5.17.0-1030.31 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-ipu6-oem-22.04a?distro=jammy | ubuntu | linux-modules-ipu6-oem-22.04a | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-ipu6-oem-22.04?distro=jammy | ubuntu | linux-modules-ipu6-oem-22.04 | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-ipu6-5.17.0-1030-oem?distro=jammy | ubuntu | linux-modules-ipu6-5.17.0-1030-oem | < 5.17.0-1030.31 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-5.17.0-1030-oem?distro=jammy | ubuntu | linux-modules-5.17.0-1030-oem | < 5.17.0-1030.31 | jammy | ||
Affected | pkg:deb/ubuntu/linux-image-unsigned-5.17.0-1030-oem?distro=jammy | ubuntu | linux-image-unsigned-5.17.0-1030-oem | < 5.17.0-1030.31 | jammy | ||
Affected | pkg:deb/ubuntu/linux-image-oem-22.04a?distro=jammy | ubuntu | linux-image-oem-22.04a | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-image-oem-22.04?distro=jammy | ubuntu | linux-image-oem-22.04 | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-image-5.17.0-1030-oem?distro=jammy | ubuntu | linux-image-5.17.0-1030-oem | < 5.17.0-1030.31 | jammy | ||
Affected | pkg:deb/ubuntu/linux-headers-oem-22.04a?distro=jammy | ubuntu | linux-headers-oem-22.04a | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-headers-oem-22.04?distro=jammy | ubuntu | linux-headers-oem-22.04 | < 5.17.0.1030.28 | jammy | ||
Affected | pkg:deb/ubuntu/linux-headers-5.17.0-1030-oem?distro=jammy | ubuntu | linux-headers-5.17.0-1030-oem | < 5.17.0-1030.31 | jammy | ||
Affected | pkg:deb/ubuntu/linux-buildinfo-5.17.0-1030-oem?distro=jammy | ubuntu | linux-buildinfo-5.17.0-1030-oem | < 5.17.0-1030.31 | jammy |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |