[USN-6151-1] Linux kernel (Xilinx ZynqMP) vulnerabilities
Several security issues were fixed in the Linux kernel.
It was discovered that the System V IPC implementation in the Linux kernel
did not properly handle large shared memory counts. A local attacker could
use this to cause a denial of service (memory exhaustion). (CVE-2021-3669)
It was discovered that the KVM VMX implementation in the Linux kernel did
not properly handle indirect branch prediction isolation between L1 and L2
VMs. An attacker in a guest VM could use this to expose sensitive
information from the host OS or other guest VMs. (CVE-2022-2196)
Gerald Lee discovered that the USB Gadget file system implementation in the
Linux kernel contained a race condition, leading to a use-after-free
vulnerability in some situations. A local attacker could use this to cause
a denial of service (system crash) or possibly execute arbitrary code.
(CVE-2022-4382)
It was discovered that the RNDIS USB driver in the Linux kernel contained
an integer overflow vulnerability. A local attacker with physical access
could plug in a malicious USB device to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2023-23559)
Package | Affected Version |
---|---|
pkg:deb/ubuntu/linux-xilinx-zynqmp?distro=focal | < 5.4.0.1023.26 |
pkg:deb/ubuntu/linux-xilinx-zynqmp-tools-5.4.0-1023?distro=focal | < 5.4.0-1023.27 |
pkg:deb/ubuntu/linux-xilinx-zynqmp-headers-5.4.0-1023?distro=focal | < 5.4.0-1023.27 |
pkg:deb/ubuntu/linux-tools-xilinx-zynqmp?distro=focal | < 5.4.0.1023.26 |
pkg:deb/ubuntu/linux-tools-5.4.0-1023-xilinx-zynqmp?distro=focal | < 5.4.0-1023.27 |
pkg:deb/ubuntu/linux-modules-5.4.0-1023-xilinx-zynqmp?distro=focal | < 5.4.0-1023.27 |
pkg:deb/ubuntu/linux-image-xilinx-zynqmp?distro=focal | < 5.4.0.1023.26 |
pkg:deb/ubuntu/linux-image-5.4.0-1023-xilinx-zynqmp?distro=focal | < 5.4.0-1023.27 |
pkg:deb/ubuntu/linux-headers-xilinx-zynqmp?distro=focal | < 5.4.0.1023.26 |
pkg:deb/ubuntu/linux-headers-5.4.0-1023-xilinx-zynqmp?distro=focal | < 5.4.0-1023.27 |
pkg:deb/ubuntu/linux-buildinfo-5.4.0-1023-xilinx-zynqmp?distro=focal | < 5.4.0-1023.27 |
- ID
- USN-6151-1
- Severity
- high
- Severity from
- CVE-2022-2196
- URL
- https://ubuntu.com/security/notices/USN-6151-1
- Published
-
2023-06-08T22:16:29
(15 months ago) - Modified
-
2023-06-08T22:16:29
(15 months ago) - Other Advisories
-
- ALSA-2022:1988
- ALSA-2023:2458
- ALSA-2023:2951
- ELSA-2022-1988
- ELSA-2022-9828
- ELSA-2022-9829
- ELSA-2023-12196
- ELSA-2023-12226
- ELSA-2023-12242
- ELSA-2023-12243
- ELSA-2023-12255
- ELSA-2023-12256
- ELSA-2023-12323
- ELSA-2023-2458
- ELSA-2023-2951
- FEDORA-2023-3fd7349f60
- FEDORA-2023-f4f9182dc8
- MS:CVE-2021-3669
- MS:CVE-2023-23559
- openSUSE-SU-2021:1357-1
- openSUSE-SU-2021:1365-1
- openSUSE-SU-2021:3338-1
- openSUSE-SU-2021:3387-1
- openSUSE-SU-2021:3447-1
- RHSA-2022:1975
- RHSA-2022:1988
- RHSA-2023:2148
- RHSA-2023:2458
- RHSA-2023:2736
- RHSA-2023:2951
- RLSA-2022:1988
- SSA:2023-048-01
- SSA:2023-172-02
- SUSE-SU-2021:3337-1
- SUSE-SU-2021:3338-1
- SUSE-SU-2021:3339-1
- SUSE-SU-2021:3387-1
- SUSE-SU-2021:3415-1
- SUSE-SU-2021:3447-1
- SUSE-SU-2023:0394-1
- SUSE-SU-2023:0433-1
- SUSE-SU-2023:0488-1
- SUSE-SU-2023:0747-1
- SUSE-SU-2023:0749-1
- SUSE-SU-2023:0749-2
- SUSE-SU-2023:0762-1
- SUSE-SU-2023:0767-1
- SUSE-SU-2023:0768-1
- SUSE-SU-2023:0770-1
- SUSE-SU-2023:0774-1
- SUSE-SU-2023:0778-1
- SUSE-SU-2023:0779-1
- SUSE-SU-2023:0780-1
- SUSE-SU-2023:0796-1
- SUSE-SU-2023:0852-1
- SUSE-SU-2023:1608-1
- SUSE-SU-2023:1609-1
- SUSE-SU-2023:1710-1
- SUSE-SU-2023:2140-1
- SUSE-SU-2023:2141-1
- SUSE-SU-2023:2146-1
- SUSE-SU-2023:2147-1
- SUSE-SU-2023:2148-1
- SUSE-SU-2023:2231-1
- SUSE-SU-2023:2506-1
- SUSE-SU-2023:2646-1
- SUSE-SU-2023:2809-1
- SUSE-SU-2023:4135-1
- SUSE-SU-2023:4136-1
- SUSE-SU-2023:4158-1
- SUSE-SU-2023:4159-1
- SUSE-SU-2023:4160-1
- SUSE-SU-2024:0155-1
- USN-5884-1
- USN-5924-1
- USN-5926-1
- USN-5927-1
- USN-5970-1
- USN-5975-1
- USN-5976-1
- USN-5977-1
- USN-5978-1
- USN-5979-1
- USN-5980-1
- USN-5981-1
- USN-5982-1
- USN-5984-1
- USN-5985-1
- USN-5987-1
- USN-5991-1
- USN-6001-1
- USN-6004-1
- USN-6009-1
- USN-6013-1
- USN-6014-1
- USN-6020-1
- USN-6030-1
- USN-6031-1
- USN-6032-1
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:deb/ubuntu/linux-xilinx-zynqmp?distro=focal | ubuntu | linux-xilinx-zynqmp | < 5.4.0.1023.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-xilinx-zynqmp-tools-5.4.0-1023?distro=focal | ubuntu | linux-xilinx-zynqmp-tools-5.4.0-1023 | < 5.4.0-1023.27 | focal | ||
Affected | pkg:deb/ubuntu/linux-xilinx-zynqmp-headers-5.4.0-1023?distro=focal | ubuntu | linux-xilinx-zynqmp-headers-5.4.0-1023 | < 5.4.0-1023.27 | focal | ||
Affected | pkg:deb/ubuntu/linux-tools-xilinx-zynqmp?distro=focal | ubuntu | linux-tools-xilinx-zynqmp | < 5.4.0.1023.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-tools-5.4.0-1023-xilinx-zynqmp?distro=focal | ubuntu | linux-tools-5.4.0-1023-xilinx-zynqmp | < 5.4.0-1023.27 | focal | ||
Affected | pkg:deb/ubuntu/linux-modules-5.4.0-1023-xilinx-zynqmp?distro=focal | ubuntu | linux-modules-5.4.0-1023-xilinx-zynqmp | < 5.4.0-1023.27 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-xilinx-zynqmp?distro=focal | ubuntu | linux-image-xilinx-zynqmp | < 5.4.0.1023.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-5.4.0-1023-xilinx-zynqmp?distro=focal | ubuntu | linux-image-5.4.0-1023-xilinx-zynqmp | < 5.4.0-1023.27 | focal | ||
Affected | pkg:deb/ubuntu/linux-headers-xilinx-zynqmp?distro=focal | ubuntu | linux-headers-xilinx-zynqmp | < 5.4.0.1023.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-headers-5.4.0-1023-xilinx-zynqmp?distro=focal | ubuntu | linux-headers-5.4.0-1023-xilinx-zynqmp | < 5.4.0-1023.27 | focal | ||
Affected | pkg:deb/ubuntu/linux-buildinfo-5.4.0-1023-xilinx-zynqmp?distro=focal | ubuntu | linux-buildinfo-5.4.0-1023-xilinx-zynqmp | < 5.4.0-1023.27 | focal |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |