[USN-6071-1] Linux kernel (OEM) vulnerabilities
Several security issues were fixed in the Linux kernel.
It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel did not properly perform filter deactivation in some
situations. A local attacker could possibly use this to gain elevated
privileges. Please note that with the fix for this CVE, kernel support for
the TCINDEX classifier has been removed. (CVE-2023-1829)
Lin Ma discovered a race condition in the io_uring subsystem in the Linux
kernel, leading to a null pointer dereference vulnerability. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2023-0468)
It was discovered that the OverlayFS implementation in the Linux kernel did
not properly handle copy up operation in some conditions. A local attacker
could possibly use this to gain elevated privileges. (CVE-2023-0386)
David Hildenbrand discovered that a race condition existed in the memory
manager of the Linux kernel when handling copy-on-write with shared memory
pages. A local attacker could use this to cause a denial of service (system
crash) or execute arbitrary code. (CVE-2022-2590)
It was discovered that the sound subsystem in the Linux kernel contained a
race condition in some situations. A local attacker could use this to cause
a denial of service (system crash). (CVE-2022-3303)
Gwnaun Jung discovered that the SFB packet scheduling implementation in the
Linux kernel contained a use-after-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2022-3586)
It was discovered that a race condition existed in the EFI capsule loader
driver in the Linux kernel, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2022-40307)
Zheng Wang and Zhuorao Yang discovered that the RealTek RTL8712U wireless
driver in the Linux kernel contained a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2022-4095)
It was discovered that the USB core subsystem in the Linux kernel did not
properly handle nested reset events. A local attacker with physical access
could plug in a specially crafted USB device to cause a denial of service
(kernel deadlock). (CVE-2022-4662)
It was discovered that a race condition existed in the Xen transport layer
implementation for the 9P file system protocol in the Linux kernel, leading
to a use-after-free vulnerability. A local attacker could use this to cause
a denial of service (guest crash) or expose sensitive information (guest
kernel memory). (CVE-2023-1859)
Kyle Zeng discovered that the ATM VC queuing discipline implementation in
the Linux kernel contained a type confusion vulnerability in some
situations. An attacker could use this to cause a denial of service (system
crash). (CVE-2023-23455)
Lianhui Tang discovered that the MPLS implementation in the Linux kernel
did not properly handle certain sysctl allocation failure conditions,
leading to a double-free vulnerability. An attacker could use this to cause
a denial of service or possibly execute arbitrary code. (CVE-2023-26545)
- ID
- USN-6071-1
- Severity
- high
- Severity from
- CVE-2022-4095
- URL
- https://ubuntu.com/security/notices/USN-6071-1
- Published
-
2023-05-10T15:11:53
(16 months ago) - Modified
-
2023-05-10T15:11:53
(16 months ago) - Other Advisories
-
- ALAS-2022-1636
- ALAS-2023-1701
- ALAS2-2022-1852
- ALAS2-2022-1888
- ALAS2-2023-1932
- ALAS2-2023-1987
- ALSA-2023:1566
- ALSA-2023:1703
- ALSA-2023:4517
- ALSA-2023:7077
- DSA-5257-1
- DSA-5324-1
- DSA-5402-1
- ELSA-2022-10108
- ELSA-2023-12109
- ELSA-2023-12117
- ELSA-2023-12118
- ELSA-2023-12160
- ELSA-2023-12196
- ELSA-2023-12199
- ELSA-2023-12200
- ELSA-2023-12206
- ELSA-2023-12207
- ELSA-2023-12323
- ELSA-2023-1566
- ELSA-2023-1703
- ELSA-2023-4517
- ELSA-2023-6583
- ELSA-2023-7077
- FEDORA-2023-4f2cf7e5d2
- FEDORA-2023-6325ed25c4
- FEDORA-2023-9e7774da21
- MS:CVE-2022-3303
- MS:CVE-2022-3586
- MS:CVE-2022-40307
- MS:CVE-2022-4662
- MS:CVE-2023-0468
- MS:CVE-2023-23455
- MS:CVE-2023-26545
- RHSA-2023:1566
- RHSA-2023:1584
- RHSA-2023:1659
- RHSA-2023:1681
- RHSA-2023:1691
- RHSA-2023:1703
- RHSA-2023:2148
- RHSA-2023:2458
- RHSA-2023:2736
- RHSA-2023:2951
- RHSA-2023:4517
- RHSA-2023:4531
- RHSA-2023:4541
- RHSA-2023:6901
- RHSA-2023:7077
- RLSA-2023:1566
- RLSA-2023:4517
- SSA:2022-333-01
- SSA:2023-048-01
- SSA:2023-172-02
- SUSE-SU-2022:3584-1
- SUSE-SU-2022:3585-1
- SUSE-SU-2022:3587-1
- SUSE-SU-2022:3599-1
- SUSE-SU-2022:3609-1
- SUSE-SU-2022:3688-1
- SUSE-SU-2022:3693-1
- SUSE-SU-2022:3704-1
- SUSE-SU-2022:3775-1
- SUSE-SU-2022:3779-1
- SUSE-SU-2022:3809-1
- SUSE-SU-2022:3810-1
- SUSE-SU-2022:3844-1
- SUSE-SU-2022:3897-1
- SUSE-SU-2022:3929-1
- SUSE-SU-2022:3930-1
- SUSE-SU-2022:3998-1
- SUSE-SU-2022:4053-1
- SUSE-SU-2022:4072-1
- SUSE-SU-2022:4272-1
- SUSE-SU-2022:4273-1
- SUSE-SU-2022:4503-1
- SUSE-SU-2022:4504-1
- SUSE-SU-2022:4505-1
- SUSE-SU-2022:4506-1
- SUSE-SU-2022:4513-1
- SUSE-SU-2022:4515-1
- SUSE-SU-2022:4516-1
- SUSE-SU-2022:4517-1
- SUSE-SU-2022:4518-1
- SUSE-SU-2022:4520-1
- SUSE-SU-2022:4527-1
- SUSE-SU-2022:4528-1
- SUSE-SU-2022:4533-1
- SUSE-SU-2022:4534-1
- SUSE-SU-2022:4539-1
- SUSE-SU-2022:4543-1
- SUSE-SU-2022:4544-1
- SUSE-SU-2022:4545-1
- SUSE-SU-2022:4546-1
- SUSE-SU-2022:4550-1
- SUSE-SU-2022:4551-1
- SUSE-SU-2022:4559-1
- SUSE-SU-2022:4560-1
- SUSE-SU-2022:4561-1
- SUSE-SU-2022:4562-1
- SUSE-SU-2022:4566-1
- SUSE-SU-2022:4569-1
- SUSE-SU-2022:4573-1
- SUSE-SU-2022:4574-1
- SUSE-SU-2022:4577-1
- SUSE-SU-2022:4580-1
- SUSE-SU-2022:4585-1
- SUSE-SU-2022:4587-1
- SUSE-SU-2022:4589-1
- SUSE-SU-2022:4595-1
- SUSE-SU-2022:4611-1
- SUSE-SU-2022:4613-1
- SUSE-SU-2022:4614-1
- SUSE-SU-2022:4615-1
- SUSE-SU-2022:4616-1
- SUSE-SU-2022:4617-1
- SUSE-SU-2023:0134-1
- SUSE-SU-2023:0145-1
- SUSE-SU-2023:0146-1
- SUSE-SU-2023:0147-1
- SUSE-SU-2023:0148-1
- SUSE-SU-2023:0149-1
- SUSE-SU-2023:0152-1
- SUSE-SU-2023:0406-1
- SUSE-SU-2023:0407-1
- SUSE-SU-2023:0410-1
- SUSE-SU-2023:0416-1
- SUSE-SU-2023:0420-1
- SUSE-SU-2023:0433-1
- SUSE-SU-2023:0488-1
- SUSE-SU-2023:0591-1
- SUSE-SU-2023:0618-1
- SUSE-SU-2023:0634-1
- SUSE-SU-2023:0747-1
- SUSE-SU-2023:0749-1
- SUSE-SU-2023:0749-2
- SUSE-SU-2023:0762-1
- SUSE-SU-2023:0767-1
- SUSE-SU-2023:0768-1
- SUSE-SU-2023:0770-1
- SUSE-SU-2023:0774-1
- SUSE-SU-2023:0778-1
- SUSE-SU-2023:0779-1
- SUSE-SU-2023:0780-1
- SUSE-SU-2023:0796-1
- SUSE-SU-2023:0852-1
- SUSE-SU-2023:1574-1
- SUSE-SU-2023:1576-1
- SUSE-SU-2023:1579-1
- SUSE-SU-2023:1588-1
- SUSE-SU-2023:1591-1
- SUSE-SU-2023:1592-1
- SUSE-SU-2023:1595-1
- SUSE-SU-2023:1599-1
- SUSE-SU-2023:1602-1
- SUSE-SU-2023:1605-1
- SUSE-SU-2023:1608-1
- SUSE-SU-2023:1609-1
- SUSE-SU-2023:1619-1
- SUSE-SU-2023:1621-1
- SUSE-SU-2023:1635-1
- SUSE-SU-2023:1639-1
- SUSE-SU-2023:1640-1
- SUSE-SU-2023:1647-1
- SUSE-SU-2023:1649-1
- SUSE-SU-2023:1651-1
- SUSE-SU-2023:1653-1
- SUSE-SU-2023:1654-1
- SUSE-SU-2023:1708-1
- SUSE-SU-2023:1710-1
- SUSE-SU-2023:1801-1
- SUSE-SU-2023:1803-1
- SUSE-SU-2023:1848-1
- SUSE-SU-2023:1894-1
- SUSE-SU-2023:2140-1
- SUSE-SU-2023:2141-1
- SUSE-SU-2023:2231-1
- SUSE-SU-2023:2232-1
- SUSE-SU-2023:2368-1
- SUSE-SU-2023:2369-1
- SUSE-SU-2023:2371-1
- SUSE-SU-2023:2384-1
- SUSE-SU-2023:2425-1
- SUSE-SU-2023:2428-1
- SUSE-SU-2023:2431-1
- SUSE-SU-2023:2443-1
- SUSE-SU-2023:2455-1
- SUSE-SU-2023:2459-1
- SUSE-SU-2023:2468-1
- SUSE-SU-2023:2506-1
- SUSE-SU-2023:2646-1
- SUSE-SU-2023:2660-1
- SUSE-SU-2023:2679-1
- SUSE-SU-2023:2680-1
- SUSE-SU-2023:2686-1
- SUSE-SU-2023:2694-1
- SUSE-SU-2023:2695-1
- SUSE-SU-2023:2702-1
- SUSE-SU-2023:2708-1
- SUSE-SU-2023:2710-1
- SUSE-SU-2023:2714-1
- SUSE-SU-2023:2718-1
- SUSE-SU-2023:2721-1
- SUSE-SU-2023:2727-1
- SUSE-SU-2023:2735-1
- SUSE-SU-2023:2741-1
- SUSE-SU-2023:2743-1
- SUSE-SU-2023:2755-1
- SUSE-SU-2023:2803-1
- SUSE-SU-2023:2805-1
- SUSE-SU-2023:2809-1
- SUSE-SU-2023:2820-1
- SUSE-SU-2023:2831-1
- SUSE-SU-2023:2871-1
- SUSE-SU-2023:2892-1
- SUSE-SU-2023:3302-1
- SUSE-SU-2023:3748-1
- SUSE-SU-2023:3749-1
- SUSE-SU-2023:3768-1
- SUSE-SU-2023:3772-1
- SUSE-SU-2023:3783-1
- SUSE-SU-2023:3784-1
- SUSE-SU-2023:3786-1
- SUSE-SU-2023:3788-1
- SUSE-SU-2023:3809-1
- SUSE-SU-2023:3811-1
- SUSE-SU-2023:3812-1
- SUSE-SU-2023:3838-1
- SUSE-SU-2023:3844-1
- SUSE-SU-2023:3846-1
- SUSE-SU-2023:3889-1
- SUSE-SU-2023:3891-1
- SUSE-SU-2023:3892-1
- SUSE-SU-2023:3893-1
- SUSE-SU-2023:3912-1
- SUSE-SU-2023:3922-1
- SUSE-SU-2023:3928-1
- SUSE-SU-2023:3988-1
- SUSE-SU-2023:4030-1
- SUSE-SU-2023:4031-1
- SUSE-SU-2023:4032-1
- SUSE-SU-2023:4033-1
- SUSE-SU-2023:4057-1
- SUSE-SU-2023:4058-1
- SUSE-SU-2023:4071-1
- SUSE-SU-2023:4072-1
- SUSE-SU-2023:4072-2
- SUSE-SU-2023:4093-1
- SUSE-SU-2023:4095-1
- SUSE-SU-2023:4097-1
- SUSE-SU-2023:4135-1
- SUSE-SU-2023:4136-1
- SUSE-SU-2023:4142-1
- SUSE-SU-2023:4158-1
- SUSE-SU-2023:4159-1
- SUSE-SU-2023:4160-1
- SUSE-SU-2023:4243-1
- SUSE-SU-2023:4261-1
- SUSE-SU-2023:4264-1
- SUSE-SU-2023:4273-1
- SUSE-SU-2023:4280-1
- SUSE-SU-2023:4319-1
- SUSE-SU-2023:4347-1
- SUSE-SU-2023:4774-1
- SUSE-SU-2023:4804-1
- SUSE-SU-2023:4845-1
- SUSE-SU-2024:0155-1
- SUSE-SU-2024:0376-1
- SUSE-SU-2024:0377-1
- SUSE-SU-2024:0393-1
- SUSE-SU-2024:0394-1
- SUSE-SU-2024:0410-1
- SUSE-SU-2024:0665-1
- SUSE-SU-2024:0695-1
- SUSE-SU-2024:1275-1
- SUSE-SU-2024:1276-1
- SUSE-SU-2024:1694-1
- SUSE-SU-2024:1708-1
- SUSE-SU-2024:1719-1
- SUSE-SU-2024:1730-1
- SUSE-SU-2024:1738-1
- SUSE-SU-2024:1979-1
- SUSE-SU-2024:1983-1
- SUSE-SU-2024:2008-1
- SUSE-SU-2024:2010-1
- SUSE-SU-2024:2019-1
- SUSE-SU-2024:2120-1
- SUSE-SU-2024:2121-1
- SUSE-SU-2024:2130-1
- SUSE-SU-2024:2139-1
- SUSE-SU-2024:2147-1
- SUSE-SU-2024:2148-1
- SUSE-SU-2024:2149-1
- SUSE-SU-2024:2183-1
- SUSE-SU-2024:2184-1
- SUSE-SU-2024:2185-1
- SUSE-SU-2024:2189-1
- SUSE-SU-2024:2190-1
- SUSE-SU-2024:2343-1
- SUSE-SU-2024:2344-1
- SUSE-SU-2024:2351-1
- SUSE-SU-2024:2357-1
- SUSE-SU-2024:2369-1
- SUSE-SU-2024:2373-1
- SUSE-SU-2024:2558-1
- SUSE-SU-2024:2559-1
- SUSE-SU-2024:2740-1
- SUSE-SU-2024:2755-1
- SUSE-SU-2024:2758-1
- SUSE-SU-2024:2759-1
- SUSE-SU-2024:2773-1
- SUSE-SU-2024:2792-1
- SUSE-SU-2024:2821-1
- SUSE-SU-2024:2822-1
- SUSE-SU-2024:3015-1
- SUSE-SU-2024:3034-1
- SUSE-SU-2024:3037-1
- SUSE-SU-2024:3039-1
- SUSE-SU-2024:3043-1
- SUSE-SU-2024:3044-1
- SUSE-SU-2024:3048-1
- USN-5790-1
- USN-5791-1
- USN-5791-2
- USN-5791-3
- USN-5792-1
- USN-5792-2
- USN-5793-1
- USN-5793-2
- USN-5793-3
- USN-5793-4
- USN-5815-1
- USN-5877-1
- USN-5912-1
- USN-5915-1
- USN-5917-1
- USN-5924-1
- USN-5927-1
- USN-5934-1
- USN-5935-1
- USN-5938-1
- USN-5939-1
- USN-5940-1
- USN-5941-1
- USN-5951-1
- USN-5962-1
- USN-5975-1
- USN-5978-1
- USN-5981-1
- USN-5982-1
- USN-5984-1
- USN-5987-1
- USN-5991-1
- USN-6000-1
- USN-6001-1
- USN-6004-1
- USN-6009-1
- USN-6013-1
- USN-6014-1
- USN-6024-1
- USN-6025-1
- USN-6027-1
- USN-6029-1
- USN-6030-1
- USN-6033-1
- USN-6040-1
- USN-6043-1
- USN-6044-1
- USN-6045-1
- USN-6047-1
- USN-6051-1
- USN-6052-1
- USN-6056-1
- USN-6057-1
- USN-6058-1
- USN-6069-1
- USN-6070-1
- USN-6072-1
- USN-6079-1
- USN-6091-1
- USN-6093-1
- USN-6096-1
- USN-6107-1
- USN-6124-1
- USN-6133-1
- USN-6134-1
- USN-6171-1
- USN-6172-1
- USN-6175-1
- USN-6185-1
- USN-6186-1
- USN-6187-1
- USN-6207-1
- USN-6222-1
- USN-6223-1
- USN-6252-1
- USN-6256-1
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:deb/ubuntu/linux-tools-oem-22.04a?distro=jammy | ubuntu | linux-tools-oem-22.04a | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-tools-oem-22.04?distro=jammy | ubuntu | linux-tools-oem-22.04 | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-tools-5.17.0-1031-oem?distro=jammy | ubuntu | linux-tools-5.17.0-1031-oem | < 5.17.0-1031.32 | jammy | ||
Affected | pkg:deb/ubuntu/linux-oem-5.17-tools-host?distro=jammy | ubuntu | linux-oem-5.17-tools-host | < 5.17.0-1031.32 | jammy | ||
Affected | pkg:deb/ubuntu/linux-oem-5.17-tools-5.17.0-1031?distro=jammy | ubuntu | linux-oem-5.17-tools-5.17.0-1031 | < 5.17.0-1031.32 | jammy | ||
Affected | pkg:deb/ubuntu/linux-oem-5.17-headers-5.17.0-1031?distro=jammy | ubuntu | linux-oem-5.17-headers-5.17.0-1031 | < 5.17.0-1031.32 | jammy | ||
Affected | pkg:deb/ubuntu/linux-oem-22.04a?distro=jammy | ubuntu | linux-oem-22.04a | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-oem-22.04?distro=jammy | ubuntu | linux-oem-22.04 | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-iwlwifi-oem-22.04a?distro=jammy | ubuntu | linux-modules-iwlwifi-oem-22.04a | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-iwlwifi-oem-22.04?distro=jammy | ubuntu | linux-modules-iwlwifi-oem-22.04 | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-iwlwifi-5.17.0-1031-oem?distro=jammy | ubuntu | linux-modules-iwlwifi-5.17.0-1031-oem | < 5.17.0-1031.32 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-ivsc-oem-22.04a?distro=jammy | ubuntu | linux-modules-ivsc-oem-22.04a | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-ivsc-oem-22.04?distro=jammy | ubuntu | linux-modules-ivsc-oem-22.04 | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-ivsc-5.17.0-1031-oem?distro=jammy | ubuntu | linux-modules-ivsc-5.17.0-1031-oem | < 5.17.0-1031.32 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-ipu6-oem-22.04a?distro=jammy | ubuntu | linux-modules-ipu6-oem-22.04a | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-ipu6-oem-22.04?distro=jammy | ubuntu | linux-modules-ipu6-oem-22.04 | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-ipu6-5.17.0-1031-oem?distro=jammy | ubuntu | linux-modules-ipu6-5.17.0-1031-oem | < 5.17.0-1031.32 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-5.17.0-1031-oem?distro=jammy | ubuntu | linux-modules-5.17.0-1031-oem | < 5.17.0-1031.32 | jammy | ||
Affected | pkg:deb/ubuntu/linux-image-unsigned-5.17.0-1031-oem?distro=jammy | ubuntu | linux-image-unsigned-5.17.0-1031-oem | < 5.17.0-1031.32 | jammy | ||
Affected | pkg:deb/ubuntu/linux-image-oem-22.04a?distro=jammy | ubuntu | linux-image-oem-22.04a | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-image-oem-22.04?distro=jammy | ubuntu | linux-image-oem-22.04 | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-image-5.17.0-1031-oem?distro=jammy | ubuntu | linux-image-5.17.0-1031-oem | < 5.17.0-1031.32 | jammy | ||
Affected | pkg:deb/ubuntu/linux-headers-oem-22.04a?distro=jammy | ubuntu | linux-headers-oem-22.04a | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-headers-oem-22.04?distro=jammy | ubuntu | linux-headers-oem-22.04 | < 5.17.0.1031.29 | jammy | ||
Affected | pkg:deb/ubuntu/linux-headers-5.17.0-1031-oem?distro=jammy | ubuntu | linux-headers-5.17.0-1031-oem | < 5.17.0-1031.32 | jammy | ||
Affected | pkg:deb/ubuntu/linux-buildinfo-5.17.0-1031-oem?distro=jammy | ubuntu | linux-buildinfo-5.17.0-1031-oem | < 5.17.0-1031.32 | jammy |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |