1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6132-1

[USN-6132-1] Linux kernel vulnerabilities

Severity High
Affected Packages 33
CVEs 13
Info Packages Vulnerabilities

Several security issues were fixed in the Linux kernel.

Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in
the netfilter subsystem of the Linux kernel when processing batch requests,
leading to a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2023-32233)

Gwangun Jung discovered that the Quick Fair Queueing scheduler
implementation in the Linux kernel contained an out-of-bounds write
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-31436)

Reima Ishii discovered that the nested KVM implementation for Intel x86
processors in the Linux kernel did not properly validate control registers
in certain situations. An attacker in a guest VM could use this to cause a
denial of service (guest crash). (CVE-2023-30456)

It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux
kernel did not properly perform data buffer size validation in some
situations. A physically proximate attacker could use this to craft a
malicious USB device that when inserted, could cause a denial of service
(system crash) or possibly expose sensitive information. (CVE-2023-1380)

Zheng Wang discovered that the Intel i915 graphics driver in the Linux
kernel did not properly handle certain error conditions, leading to a
double-free. A local attacker could possibly use this to cause a denial of
service (system crash). (CVE-2022-3707)

Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did
not properly implement speculative execution barriers in usercopy functions
in certain situations. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2023-0459)

It was discovered that the TLS subsystem in the Linux kernel contained a
type confusion vulnerability in some situations. A local attacker could use
this to cause a denial of service (system crash) or possibly expose
sensitive information. (CVE-2023-1075)

It was discovered that the Reliable Datagram Sockets (RDS) protocol
implementation in the Linux kernel contained a type confusion vulnerability
in some situations. An attacker could use this to cause a denial of service
(system crash). (CVE-2023-1078)

Xingyuan Mo discovered that the x86 KVM implementation in the Linux kernel
did not properly initialize some data structures. A local attacker could
use this to expose sensitive information (kernel memory). (CVE-2023-1513)

It was discovered that a use-after-free vulnerability existed in the iSCSI
TCP implementation in the Linux kernel. A local attacker could possibly use
this to cause a denial of service (system crash). (CVE-2023-2162)

Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu
Linux kernel contained a race condition when handling inode locking in some
situations. A local attacker could use this to cause a denial of service
(kernel deadlock). (CVE-2023-2612)

It was discovered that the NET/ROM protocol implementation in the Linux
kernel contained a race condition in some situations, leading to a use-
after-free vulnerability. A local attacker could use this to cause a denial
of service (system crash) or possibly execute arbitrary code.
(CVE-2023-32269)

Duoming Zhou discovered that a race condition existed in the infrared
receiver/transceiver driver in the Linux kernel, leading to a use-after-
free vulnerability. A privileged attacker could use this to cause a denial
of service (system crash) or possibly execute arbitrary code.
(CVE-2023-1118)

Package Affected Version
pkg:deb/ubuntu/linux-tools-bluefield?distro=focal < 5.4.0.1064.59
pkg:deb/ubuntu/linux-tools-aws?distro=bionic < 5.4.0.1103.81
pkg:deb/ubuntu/linux-tools-aws-edge?distro=bionic < 5.4.0.1103.81
pkg:deb/ubuntu/linux-tools-5.4.0-1103-aws?distro=bionic < 5.4.0-1103.111~18.04.1
pkg:deb/ubuntu/linux-tools-5.4.0-1064-bluefield?distro=focal < 5.4.0-1064.70
pkg:deb/ubuntu/linux-modules-extra-aws?distro=bionic < 5.4.0.1103.81
pkg:deb/ubuntu/linux-modules-extra-aws-edge?distro=bionic < 5.4.0.1103.81
pkg:deb/ubuntu/linux-modules-extra-5.4.0-1103-aws?distro=bionic < 5.4.0-1103.111~18.04.1
pkg:deb/ubuntu/linux-modules-5.4.0-1103-aws?distro=bionic < 5.4.0-1103.111~18.04.1
pkg:deb/ubuntu/linux-modules-5.4.0-1064-bluefield?distro=focal < 5.4.0-1064.70
pkg:deb/ubuntu/linux-image-unsigned-5.4.0-1103-aws?distro=bionic < 5.4.0-1103.111~18.04.1
pkg:deb/ubuntu/linux-image-unsigned-5.4.0-1064-bluefield?distro=focal < 5.4.0-1064.70
pkg:deb/ubuntu/linux-image-bluefield?distro=focal < 5.4.0.1064.59
pkg:deb/ubuntu/linux-image-aws?distro=bionic < 5.4.0.1103.81
pkg:deb/ubuntu/linux-image-aws-edge?distro=bionic < 5.4.0.1103.81
pkg:deb/ubuntu/linux-image-5.4.0-1103-aws?distro=bionic < 5.4.0-1103.111~18.04.1
pkg:deb/ubuntu/linux-image-5.4.0-1064-bluefield?distro=focal < 5.4.0-1064.70
pkg:deb/ubuntu/linux-headers-bluefield?distro=focal < 5.4.0.1064.59
pkg:deb/ubuntu/linux-headers-aws?distro=bionic < 5.4.0.1103.81
pkg:deb/ubuntu/linux-headers-aws-edge?distro=bionic < 5.4.0.1103.81
pkg:deb/ubuntu/linux-headers-5.4.0-1103-aws?distro=bionic < 5.4.0-1103.111~18.04.1
pkg:deb/ubuntu/linux-headers-5.4.0-1064-bluefield?distro=focal < 5.4.0-1064.70
pkg:deb/ubuntu/linux-cloud-tools-5.4.0-1103-aws?distro=bionic < 5.4.0-1103.111~18.04.1
pkg:deb/ubuntu/linux-buildinfo-5.4.0-1103-aws?distro=bionic < 5.4.0-1103.111~18.04.1
pkg:deb/ubuntu/linux-buildinfo-5.4.0-1064-bluefield?distro=focal < 5.4.0-1064.70
pkg:deb/ubuntu/linux-bluefield?distro=focal < 5.4.0.1064.59
pkg:deb/ubuntu/linux-bluefield-tools-5.4.0-1064?distro=focal < 5.4.0-1064.70
pkg:deb/ubuntu/linux-bluefield-headers-5.4.0-1064?distro=focal < 5.4.0-1064.70
pkg:deb/ubuntu/linux-aws?distro=bionic < 5.4.0.1103.81
pkg:deb/ubuntu/linux-aws-edge?distro=bionic < 5.4.0.1103.81
pkg:deb/ubuntu/linux-aws-5.4-tools-5.4.0-1103?distro=bionic < 5.4.0-1103.111~18.04.1
pkg:deb/ubuntu/linux-aws-5.4-headers-5.4.0-1103?distro=bionic < 5.4.0-1103.111~18.04.1
pkg:deb/ubuntu/linux-aws-5.4-cloud-tools-5.4.0-1103?distro=bionic < 5.4.0-1103.111~18.04.1
ID
USN-6132-1
Severity
high
Severity from
CVE-2023-1078
URL
https://ubuntu.com/security/notices/USN-6132-1
Published
2023-06-01T18:54:49
(15 months ago)
Modified
2023-06-01T18:54:49
(15 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/linux-tools-bluefield?distro=focal ubuntu linux-tools-bluefield < 5.4.0.1064.59 focal
Affected pkg:deb/ubuntu/linux-tools-aws?distro=bionic ubuntu linux-tools-aws < 5.4.0.1103.81 bionic
Affected pkg:deb/ubuntu/linux-tools-aws-edge?distro=bionic ubuntu linux-tools-aws-edge < 5.4.0.1103.81 bionic
Affected pkg:deb/ubuntu/linux-tools-5.4.0-1103-aws?distro=bionic ubuntu linux-tools-5.4.0-1103-aws < 5.4.0-1103.111~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-tools-5.4.0-1064-bluefield?distro=focal ubuntu linux-tools-5.4.0-1064-bluefield < 5.4.0-1064.70 focal
Affected pkg:deb/ubuntu/linux-modules-extra-aws?distro=bionic ubuntu linux-modules-extra-aws < 5.4.0.1103.81 bionic
Affected pkg:deb/ubuntu/linux-modules-extra-aws-edge?distro=bionic ubuntu linux-modules-extra-aws-edge < 5.4.0.1103.81 bionic
Affected pkg:deb/ubuntu/linux-modules-extra-5.4.0-1103-aws?distro=bionic ubuntu linux-modules-extra-5.4.0-1103-aws < 5.4.0-1103.111~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-modules-5.4.0-1103-aws?distro=bionic ubuntu linux-modules-5.4.0-1103-aws < 5.4.0-1103.111~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-modules-5.4.0-1064-bluefield?distro=focal ubuntu linux-modules-5.4.0-1064-bluefield < 5.4.0-1064.70 focal
Affected pkg:deb/ubuntu/linux-image-unsigned-5.4.0-1103-aws?distro=bionic ubuntu linux-image-unsigned-5.4.0-1103-aws < 5.4.0-1103.111~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-image-unsigned-5.4.0-1064-bluefield?distro=focal ubuntu linux-image-unsigned-5.4.0-1064-bluefield < 5.4.0-1064.70 focal
Affected pkg:deb/ubuntu/linux-image-bluefield?distro=focal ubuntu linux-image-bluefield < 5.4.0.1064.59 focal
Affected pkg:deb/ubuntu/linux-image-aws?distro=bionic ubuntu linux-image-aws < 5.4.0.1103.81 bionic
Affected pkg:deb/ubuntu/linux-image-aws-edge?distro=bionic ubuntu linux-image-aws-edge < 5.4.0.1103.81 bionic
Affected pkg:deb/ubuntu/linux-image-5.4.0-1103-aws?distro=bionic ubuntu linux-image-5.4.0-1103-aws < 5.4.0-1103.111~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-image-5.4.0-1064-bluefield?distro=focal ubuntu linux-image-5.4.0-1064-bluefield < 5.4.0-1064.70 focal
Affected pkg:deb/ubuntu/linux-headers-bluefield?distro=focal ubuntu linux-headers-bluefield < 5.4.0.1064.59 focal
Affected pkg:deb/ubuntu/linux-headers-aws?distro=bionic ubuntu linux-headers-aws < 5.4.0.1103.81 bionic
Affected pkg:deb/ubuntu/linux-headers-aws-edge?distro=bionic ubuntu linux-headers-aws-edge < 5.4.0.1103.81 bionic
Affected pkg:deb/ubuntu/linux-headers-5.4.0-1103-aws?distro=bionic ubuntu linux-headers-5.4.0-1103-aws < 5.4.0-1103.111~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-headers-5.4.0-1064-bluefield?distro=focal ubuntu linux-headers-5.4.0-1064-bluefield < 5.4.0-1064.70 focal
Affected pkg:deb/ubuntu/linux-cloud-tools-5.4.0-1103-aws?distro=bionic ubuntu linux-cloud-tools-5.4.0-1103-aws < 5.4.0-1103.111~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-buildinfo-5.4.0-1103-aws?distro=bionic ubuntu linux-buildinfo-5.4.0-1103-aws < 5.4.0-1103.111~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-buildinfo-5.4.0-1064-bluefield?distro=focal ubuntu linux-buildinfo-5.4.0-1064-bluefield < 5.4.0-1064.70 focal
Affected pkg:deb/ubuntu/linux-bluefield?distro=focal ubuntu linux-bluefield < 5.4.0.1064.59 focal
Affected pkg:deb/ubuntu/linux-bluefield-tools-5.4.0-1064?distro=focal ubuntu linux-bluefield-tools-5.4.0-1064 < 5.4.0-1064.70 focal
Affected pkg:deb/ubuntu/linux-bluefield-headers-5.4.0-1064?distro=focal ubuntu linux-bluefield-headers-5.4.0-1064 < 5.4.0-1064.70 focal
Affected pkg:deb/ubuntu/linux-aws?distro=bionic ubuntu linux-aws < 5.4.0.1103.81 bionic
Affected pkg:deb/ubuntu/linux-aws-edge?distro=bionic ubuntu linux-aws-edge < 5.4.0.1103.81 bionic
Affected pkg:deb/ubuntu/linux-aws-5.4-tools-5.4.0-1103?distro=bionic ubuntu linux-aws-5.4-tools-5.4.0-1103 < 5.4.0-1103.111~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-aws-5.4-headers-5.4.0-1103?distro=bionic ubuntu linux-aws-5.4-headers-5.4.0-1103 < 5.4.0-1103.111~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-aws-5.4-cloud-tools-5.4.0-1103?distro=bionic ubuntu linux-aws-5.4-cloud-tools-5.4.0-1103 < 5.4.0-1103.111~18.04.1 bionic
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date