1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6032-1

[USN-6032-1] Linux kernel (OEM) vulnerabilities

Severity High
Affected Packages 19
CVEs 7
Info Packages Vulnerabilities

Several security issues were fixed in the Linux kernel.

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux
kernel contained an out-of-bounds write vulnerability. A local attacker
could use this to cause a denial of service (system crash).
(CVE-2022-36280)

Gerald Lee discovered that the USB Gadget file system implementation in the
Linux kernel contained a race condition, leading to a use-after-free
vulnerability in some situations. A local attacker could use this to cause
a denial of service (system crash) or possibly execute arbitrary code.
(CVE-2022-4382)

It was discovered that a memory leak existed in the SCTP protocol
implementation in the Linux kernel. A local attacker could use this to
cause a denial of service (memory exhaustion). (CVE-2023-1074)

It was discovered that the RNDIS USB driver in the Linux kernel contained
an integer overflow vulnerability. A local attacker with physical access
could plug in a malicious USB device to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2023-23559)

It was discovered that the file system writeback functionality in the Linux
kernel contained a user-after-free vulnerability. A local attacker could
possibly use this to cause a denial of service (system crash) or execute
arbitrary code. (CVE-2023-26605)

It was discovered that the NTFS file system implementation in the Linux
kernel did not properly validate attributes in certain situations, leading
to an out-of-bounds read vulnerability. A local attacker could possibly use
this to expose sensitive information (kernel memory). (CVE-2023-26607)

Duoming Zhou discovered that a race condition existed in the infrared
receiver/transceiver driver in the Linux kernel, leading to a use-after-
free vulnerability. A privileged attacker could use this to cause a denial
of service (system crash) or possibly execute arbitrary code.
(CVE-2023-1118)

Package Affected Version
pkg:deb/ubuntu/linux-tools-oem-22.04b?distro=jammy < 6.0.0.1014.14
pkg:deb/ubuntu/linux-tools-6.0.0-1014-oem?distro=jammy < 6.0.0-1014.14
pkg:deb/ubuntu/linux-oem-6.0-tools-host?distro=jammy < 6.0.0-1014.14
pkg:deb/ubuntu/linux-oem-6.0-tools-6.0.0-1014?distro=jammy < 6.0.0-1014.14
pkg:deb/ubuntu/linux-oem-6.0-headers-6.0.0-1014?distro=jammy < 6.0.0-1014.14
pkg:deb/ubuntu/linux-oem-22.04b?distro=jammy < 6.0.0.1014.14
pkg:deb/ubuntu/linux-modules-iwlwifi-oem-22.04b?distro=jammy < 6.0.0.1014.14
pkg:deb/ubuntu/linux-modules-iwlwifi-6.0.0-1014-oem?distro=jammy < 6.0.0-1014.14
pkg:deb/ubuntu/linux-modules-ivsc-oem-22.04b?distro=jammy < 6.0.0.1014.14
pkg:deb/ubuntu/linux-modules-ivsc-6.0.0-1014-oem?distro=jammy < 6.0.0-1014.14
pkg:deb/ubuntu/linux-modules-ipu6-oem-22.04b?distro=jammy < 6.0.0.1014.14
pkg:deb/ubuntu/linux-modules-ipu6-6.0.0-1014-oem?distro=jammy < 6.0.0-1014.14
pkg:deb/ubuntu/linux-modules-6.0.0-1014-oem?distro=jammy < 6.0.0-1014.14
pkg:deb/ubuntu/linux-image-unsigned-6.0.0-1014-oem?distro=jammy < 6.0.0-1014.14
pkg:deb/ubuntu/linux-image-oem-22.04b?distro=jammy < 6.0.0.1014.14
pkg:deb/ubuntu/linux-image-6.0.0-1014-oem?distro=jammy < 6.0.0-1014.14
pkg:deb/ubuntu/linux-headers-oem-22.04b?distro=jammy < 6.0.0.1014.14
pkg:deb/ubuntu/linux-headers-6.0.0-1014-oem?distro=jammy < 6.0.0-1014.14
pkg:deb/ubuntu/linux-buildinfo-6.0.0-1014-oem?distro=jammy < 6.0.0-1014.14
ID
USN-6032-1
Severity
high
Severity from
CVE-2023-1118
URL
https://ubuntu.com/security/notices/USN-6032-1
Published
2023-04-19T16:57:37
(17 months ago)
Modified
2023-04-19T16:57:37
(17 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/linux-tools-oem-22.04b?distro=jammy ubuntu linux-tools-oem-22.04b < 6.0.0.1014.14 jammy
Affected pkg:deb/ubuntu/linux-tools-6.0.0-1014-oem?distro=jammy ubuntu linux-tools-6.0.0-1014-oem < 6.0.0-1014.14 jammy
Affected pkg:deb/ubuntu/linux-oem-6.0-tools-host?distro=jammy ubuntu linux-oem-6.0-tools-host < 6.0.0-1014.14 jammy
Affected pkg:deb/ubuntu/linux-oem-6.0-tools-6.0.0-1014?distro=jammy ubuntu linux-oem-6.0-tools-6.0.0-1014 < 6.0.0-1014.14 jammy
Affected pkg:deb/ubuntu/linux-oem-6.0-headers-6.0.0-1014?distro=jammy ubuntu linux-oem-6.0-headers-6.0.0-1014 < 6.0.0-1014.14 jammy
Affected pkg:deb/ubuntu/linux-oem-22.04b?distro=jammy ubuntu linux-oem-22.04b < 6.0.0.1014.14 jammy
Affected pkg:deb/ubuntu/linux-modules-iwlwifi-oem-22.04b?distro=jammy ubuntu linux-modules-iwlwifi-oem-22.04b < 6.0.0.1014.14 jammy
Affected pkg:deb/ubuntu/linux-modules-iwlwifi-6.0.0-1014-oem?distro=jammy ubuntu linux-modules-iwlwifi-6.0.0-1014-oem < 6.0.0-1014.14 jammy
Affected pkg:deb/ubuntu/linux-modules-ivsc-oem-22.04b?distro=jammy ubuntu linux-modules-ivsc-oem-22.04b < 6.0.0.1014.14 jammy
Affected pkg:deb/ubuntu/linux-modules-ivsc-6.0.0-1014-oem?distro=jammy ubuntu linux-modules-ivsc-6.0.0-1014-oem < 6.0.0-1014.14 jammy
Affected pkg:deb/ubuntu/linux-modules-ipu6-oem-22.04b?distro=jammy ubuntu linux-modules-ipu6-oem-22.04b < 6.0.0.1014.14 jammy
Affected pkg:deb/ubuntu/linux-modules-ipu6-6.0.0-1014-oem?distro=jammy ubuntu linux-modules-ipu6-6.0.0-1014-oem < 6.0.0-1014.14 jammy
Affected pkg:deb/ubuntu/linux-modules-6.0.0-1014-oem?distro=jammy ubuntu linux-modules-6.0.0-1014-oem < 6.0.0-1014.14 jammy
Affected pkg:deb/ubuntu/linux-image-unsigned-6.0.0-1014-oem?distro=jammy ubuntu linux-image-unsigned-6.0.0-1014-oem < 6.0.0-1014.14 jammy
Affected pkg:deb/ubuntu/linux-image-oem-22.04b?distro=jammy ubuntu linux-image-oem-22.04b < 6.0.0.1014.14 jammy
Affected pkg:deb/ubuntu/linux-image-6.0.0-1014-oem?distro=jammy ubuntu linux-image-6.0.0-1014-oem < 6.0.0-1014.14 jammy
Affected pkg:deb/ubuntu/linux-headers-oem-22.04b?distro=jammy ubuntu linux-headers-oem-22.04b < 6.0.0.1014.14 jammy
Affected pkg:deb/ubuntu/linux-headers-6.0.0-1014-oem?distro=jammy ubuntu linux-headers-6.0.0-1014-oem < 6.0.0-1014.14 jammy
Affected pkg:deb/ubuntu/linux-buildinfo-6.0.0-1014-oem?distro=jammy ubuntu linux-buildinfo-6.0.0-1014-oem < 6.0.0-1014.14 jammy
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date