1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6247-1

[USN-6247-1] Linux kernel (OEM) vulnerabilities

Severity High
Affected Packages 26
CVEs 6
Info Packages Vulnerabilities

Several security issues were fixed in the Linux kernel.

David Leadbeater discovered that the netfilter IRC protocol tracking
implementation in the Linux Kernel incorrectly handled certain message
payloads in some situations. A remote attacker could possibly use this to
cause a denial of service or bypass firewall filtering. (CVE-2022-2663)

It was discovered that the IDT 77252 ATM PCI device driver in the Linux
kernel did not properly remove any pending timers during device exit,
resulting in a use-after-free vulnerability. A local attacker could
possibly use this to cause a denial of service (system crash) or execute
arbitrary code. (CVE-2022-3635)

It was discovered that the network queuing discipline implementation in the
Linux kernel contained a null pointer dereference in some situations. A
local attacker could use this to cause a denial of service (system crash).
(CVE-2022-47929)

Lucas Leong discovered that the IPv6 SR implementation in the Linux kernel
did not properly validate SEG6 configuration attributes, leading to an out-
of-bounds read vulnerability. A privileged attacker could use this to
expose sensitive information (kernel memory). (CVE-2023-2860)

Mingi Cho discovered that the netfilter subsystem in the Linux kernel did
not properly validate the status of a nft chain while performing a lookup
by id, leading to a use-after-free vulnerability. An attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2023-31248)

Tanguy Dubroca discovered that the netfilter subsystem in the Linux kernel
did not properly handle certain pointer data type, leading to an out-of-
bounds write vulnerability. A privileged attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2023-35001)

Package Affected Version
pkg:deb/ubuntu/linux-tools-oem-22.04a?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-tools-oem-22.04?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-tools-5.17.0-1035-oem?distro=jammy < 5.17.0-1035.36
pkg:deb/ubuntu/linux-oem-5.17-tools-host?distro=jammy < 5.17.0-1035.36
pkg:deb/ubuntu/linux-oem-5.17-tools-5.17.0-1035?distro=jammy < 5.17.0-1035.36
pkg:deb/ubuntu/linux-oem-5.17-headers-5.17.0-1035?distro=jammy < 5.17.0-1035.36
pkg:deb/ubuntu/linux-oem-22.04a?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-oem-22.04?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-modules-iwlwifi-oem-22.04a?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-modules-iwlwifi-oem-22.04?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-modules-iwlwifi-5.17.0-1035-oem?distro=jammy < 5.17.0-1035.36
pkg:deb/ubuntu/linux-modules-ivsc-oem-22.04a?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-modules-ivsc-oem-22.04?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-modules-ivsc-5.17.0-1035-oem?distro=jammy < 5.17.0-1035.36
pkg:deb/ubuntu/linux-modules-ipu6-oem-22.04a?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-modules-ipu6-oem-22.04?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-modules-ipu6-5.17.0-1035-oem?distro=jammy < 5.17.0-1035.36
pkg:deb/ubuntu/linux-modules-5.17.0-1035-oem?distro=jammy < 5.17.0-1035.36
pkg:deb/ubuntu/linux-image-unsigned-5.17.0-1035-oem?distro=jammy < 5.17.0-1035.36
pkg:deb/ubuntu/linux-image-oem-22.04a?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-image-oem-22.04?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-image-5.17.0-1035-oem?distro=jammy < 5.17.0-1035.36
pkg:deb/ubuntu/linux-headers-oem-22.04a?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-headers-oem-22.04?distro=jammy < 5.17.0.1035.33
pkg:deb/ubuntu/linux-headers-5.17.0-1035-oem?distro=jammy < 5.17.0-1035.36
pkg:deb/ubuntu/linux-buildinfo-5.17.0-1035-oem?distro=jammy < 5.17.0-1035.36
ID
USN-6247-1
Severity
high
Severity from
CVE-2023-31248
URL
https://ubuntu.com/security/notices/USN-6247-1
Published
2023-07-25T21:49:46
(13 months ago)
Modified
2023-07-25T21:49:46
(13 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/linux-tools-oem-22.04a?distro=jammy ubuntu linux-tools-oem-22.04a < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-tools-oem-22.04?distro=jammy ubuntu linux-tools-oem-22.04 < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-tools-5.17.0-1035-oem?distro=jammy ubuntu linux-tools-5.17.0-1035-oem < 5.17.0-1035.36 jammy
Affected pkg:deb/ubuntu/linux-oem-5.17-tools-host?distro=jammy ubuntu linux-oem-5.17-tools-host < 5.17.0-1035.36 jammy
Affected pkg:deb/ubuntu/linux-oem-5.17-tools-5.17.0-1035?distro=jammy ubuntu linux-oem-5.17-tools-5.17.0-1035 < 5.17.0-1035.36 jammy
Affected pkg:deb/ubuntu/linux-oem-5.17-headers-5.17.0-1035?distro=jammy ubuntu linux-oem-5.17-headers-5.17.0-1035 < 5.17.0-1035.36 jammy
Affected pkg:deb/ubuntu/linux-oem-22.04a?distro=jammy ubuntu linux-oem-22.04a < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-oem-22.04?distro=jammy ubuntu linux-oem-22.04 < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-modules-iwlwifi-oem-22.04a?distro=jammy ubuntu linux-modules-iwlwifi-oem-22.04a < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-modules-iwlwifi-oem-22.04?distro=jammy ubuntu linux-modules-iwlwifi-oem-22.04 < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-modules-iwlwifi-5.17.0-1035-oem?distro=jammy ubuntu linux-modules-iwlwifi-5.17.0-1035-oem < 5.17.0-1035.36 jammy
Affected pkg:deb/ubuntu/linux-modules-ivsc-oem-22.04a?distro=jammy ubuntu linux-modules-ivsc-oem-22.04a < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-modules-ivsc-oem-22.04?distro=jammy ubuntu linux-modules-ivsc-oem-22.04 < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-modules-ivsc-5.17.0-1035-oem?distro=jammy ubuntu linux-modules-ivsc-5.17.0-1035-oem < 5.17.0-1035.36 jammy
Affected pkg:deb/ubuntu/linux-modules-ipu6-oem-22.04a?distro=jammy ubuntu linux-modules-ipu6-oem-22.04a < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-modules-ipu6-oem-22.04?distro=jammy ubuntu linux-modules-ipu6-oem-22.04 < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-modules-ipu6-5.17.0-1035-oem?distro=jammy ubuntu linux-modules-ipu6-5.17.0-1035-oem < 5.17.0-1035.36 jammy
Affected pkg:deb/ubuntu/linux-modules-5.17.0-1035-oem?distro=jammy ubuntu linux-modules-5.17.0-1035-oem < 5.17.0-1035.36 jammy
Affected pkg:deb/ubuntu/linux-image-unsigned-5.17.0-1035-oem?distro=jammy ubuntu linux-image-unsigned-5.17.0-1035-oem < 5.17.0-1035.36 jammy
Affected pkg:deb/ubuntu/linux-image-oem-22.04a?distro=jammy ubuntu linux-image-oem-22.04a < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-image-oem-22.04?distro=jammy ubuntu linux-image-oem-22.04 < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-image-5.17.0-1035-oem?distro=jammy ubuntu linux-image-5.17.0-1035-oem < 5.17.0-1035.36 jammy
Affected pkg:deb/ubuntu/linux-headers-oem-22.04a?distro=jammy ubuntu linux-headers-oem-22.04a < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-headers-oem-22.04?distro=jammy ubuntu linux-headers-oem-22.04 < 5.17.0.1035.33 jammy
Affected pkg:deb/ubuntu/linux-headers-5.17.0-1035-oem?distro=jammy ubuntu linux-headers-5.17.0-1035-oem < 5.17.0-1035.36 jammy
Affected pkg:deb/ubuntu/linux-buildinfo-5.17.0-1035-oem?distro=jammy ubuntu linux-buildinfo-5.17.0-1035-oem < 5.17.0-1035.36 jammy
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date