[USN-6255-1] Linux kernel (Intel IoTG) vulnerabilities
Several security issues were fixed in the Linux kernel.
It was discovered that the IP-VLAN network driver for the Linux kernel did
not properly initialize memory in some situations, leading to an out-of-
bounds write vulnerability. An attacker could use this to cause a denial of
service (system crash) or possibly execute arbitrary code. (CVE-2023-3090)
Mingi Cho discovered that the netfilter subsystem in the Linux kernel did
not properly validate the status of a nft chain while performing a lookup
by id, leading to a use-after-free vulnerability. An attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2023-31248)
Querijn Voet discovered that a race condition existed in the io_uring
subsystem in the Linux kernel, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2023-3389)
It was discovered that the netfilter subsystem in the Linux kernel did not
properly handle some error conditions, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-3390)
Lin Ma discovered that a race condition existed in the MCTP implementation
in the Linux kernel, leading to a use-after-free vulnerability. A
privileged attacker could use this to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2023-3439)
Tanguy Dubroca discovered that the netfilter subsystem in the Linux kernel
did not properly handle certain pointer data type, leading to an out-of-
bounds write vulnerability. A privileged attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2023-35001)
- ID
- USN-6255-1
- Severity
- high
- Severity from
- CVE-2023-3090
- URL
- https://ubuntu.com/security/notices/USN-6255-1
- Published
-
2023-07-26T18:41:25
(14 months ago) - Modified
-
2023-07-26T18:41:25
(14 months ago) - Other Advisories
-
- ALAS-2023-1783
- ALAS-2023-1827
- ALAS2-2023-2100
- ALAS2-2023-2130
- ALAS2-2023-2268
- ALSA-2023:4377
- ALSA-2023:5069
- ALSA-2023:5244
- DSA-5448-1
- DSA-5453-1
- DSA-5461-1
- DSA-5480-1
- ELSA-2023-12688
- ELSA-2023-12839
- ELSA-2023-12842
- ELSA-2023-4377
- ELSA-2023-5069
- ELSA-2023-5244
- ELSA-2023-5622
- FEDORA-2023-3661f028b8
- FEDORA-2023-e4e985b5dd
- MS:CVE-2023-3090
- MS:CVE-2023-3389
- MS:CVE-2023-3439
- RHSA-2023:4377
- RHSA-2023:4378
- RHSA-2023:4380
- RHSA-2023:5069
- RHSA-2023:5091
- RHSA-2023:5093
- RHSA-2023:5221
- RHSA-2023:5244
- RHSA-2023:5255
- RHSA-2023:5574
- RHSA-2023:5621
- RHSA-2023:5622
- RLSA-2023:5244
- SSA:2023-325-01
- SUSE-SU-2023:2803-1
- SUSE-SU-2023:2804-1
- SUSE-SU-2023:2805-1
- SUSE-SU-2023:2808-1
- SUSE-SU-2023:2810-1
- SUSE-SU-2023:2820-1
- SUSE-SU-2023:2822-1
- SUSE-SU-2023:2830-1
- SUSE-SU-2023:2831-1
- SUSE-SU-2023:2834-1
- SUSE-SU-2023:2859-1
- SUSE-SU-2023:2871-1
- SUSE-SU-2023:2892-1
- SUSE-SU-2023:3006-1
- SUSE-SU-2023:3171-1
- SUSE-SU-2023:3172-1
- SUSE-SU-2023:3180-1
- SUSE-SU-2023:3182-1
- SUSE-SU-2023:3302-1
- SUSE-SU-2023:3309-1
- SUSE-SU-2023:3318-1
- SUSE-SU-2023:3324-1
- SUSE-SU-2023:3349-1
- SUSE-SU-2023:3390-1
- SUSE-SU-2023:3391-1
- SUSE-SU-2023:3392-1
- SUSE-SU-2023:3421-1
- SUSE-SU-2023:3566-1
- SUSE-SU-2023:3571-1
- SUSE-SU-2023:3572-1
- SUSE-SU-2023:3576-1
- SUSE-SU-2023:3582-1
- SUSE-SU-2023:3585-1
- SUSE-SU-2023:3592-1
- SUSE-SU-2023:3594-1
- SUSE-SU-2023:3595-1
- SUSE-SU-2023:3596-1
- SUSE-SU-2023:3598-1
- SUSE-SU-2023:3603-1
- SUSE-SU-2023:3607-1
- SUSE-SU-2023:3612-1
- SUSE-SU-2023:3620-1
- SUSE-SU-2023:3621-1
- SUSE-SU-2023:3622-1
- SUSE-SU-2023:3623-1
- SUSE-SU-2023:3627-1
- SUSE-SU-2023:3628-1
- SUSE-SU-2023:3629-1
- SUSE-SU-2023:3630-1
- SUSE-SU-2023:3631-1
- SUSE-SU-2023:3632-1
- SUSE-SU-2023:3644-1
- SUSE-SU-2023:3647-1
- SUSE-SU-2023:3648-1
- SUSE-SU-2023:3653-1
- SUSE-SU-2023:3657-1
- SUSE-SU-2023:3659-1
- SUSE-SU-2023:3668-1
- SUSE-SU-2023:3671-1
- SUSE-SU-2023:3675-1
- SUSE-SU-2023:3676-1
- SUSE-SU-2023:3677-1
- SUSE-SU-2023:3772-1
- SUSE-SU-2023:3773-1
- SUSE-SU-2023:3783-1
- SUSE-SU-2023:3784-1
- SUSE-SU-2023:3892-1
- SUSE-SU-2023:3922-1
- SUSE-SU-2023:3923-1
- SUSE-SU-2023:3928-1
- SUSE-SU-2023:4166-1
- SUSE-SU-2023:4175-1
- SUSE-SU-2023:4201-1
- SUSE-SU-2023:4219-1
- SUSE-SU-2023:4239-1
- SUSE-SU-2023:4245-1
- SUSE-SU-2023:4267-1
- SUSE-SU-2023:4279-1
- SUSE-SU-2023:4285-1
- SUSE-SU-2023:4308-1
- SUSE-SU-2023:4326-1
- USN-6231-1
- USN-6246-1
- USN-6247-1
- USN-6248-1
- USN-6249-1
- USN-6250-1
- USN-6251-1
- USN-6252-1
- USN-6254-1
- USN-6260-1
- USN-6261-1
- USN-6285-1
- USN-6385-1
- USN-6460-1
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:deb/ubuntu/linux-tools-intel?distro=focal | ubuntu | linux-tools-intel | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-tools-intel-iotg?distro=focal | ubuntu | linux-tools-intel-iotg | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-tools-intel-iotg-edge?distro=focal | ubuntu | linux-tools-intel-iotg-edge | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-tools-5.15.0-1036-intel-iotg?distro=focal | ubuntu | linux-tools-5.15.0-1036-intel-iotg | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-modules-iwlwifi-5.15.0-1036-intel-iotg?distro=focal | ubuntu | linux-modules-iwlwifi-5.15.0-1036-intel-iotg | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-modules-extra-5.15.0-1036-intel-iotg?distro=focal | ubuntu | linux-modules-extra-5.15.0-1036-intel-iotg | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-modules-5.15.0-1036-intel-iotg?distro=focal | ubuntu | linux-modules-5.15.0-1036-intel-iotg | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-intel?distro=focal | ubuntu | linux-intel | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-intel-iotg?distro=focal | ubuntu | linux-intel-iotg | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-intel-iotg-edge?distro=focal | ubuntu | linux-intel-iotg-edge | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-intel-iotg-5.15-tools-host?distro=focal | ubuntu | linux-intel-iotg-5.15-tools-host | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-intel-iotg-5.15-tools-common?distro=focal | ubuntu | linux-intel-iotg-5.15-tools-common | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-intel-iotg-5.15-tools-5.15.0-1036?distro=focal | ubuntu | linux-intel-iotg-5.15-tools-5.15.0-1036 | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-intel-iotg-5.15-headers-5.15.0-1036?distro=focal | ubuntu | linux-intel-iotg-5.15-headers-5.15.0-1036 | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-intel-iotg-5.15-cloud-tools-common?distro=focal | ubuntu | linux-intel-iotg-5.15-cloud-tools-common | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-intel-iotg-5.15-cloud-tools-5.15.0-1036?distro=focal | ubuntu | linux-intel-iotg-5.15-cloud-tools-5.15.0-1036 | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-unsigned-5.15.0-1036-intel-iotg?distro=focal | ubuntu | linux-image-unsigned-5.15.0-1036-intel-iotg | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-intel?distro=focal | ubuntu | linux-image-intel | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-intel-iotg?distro=focal | ubuntu | linux-image-intel-iotg | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-intel-iotg-edge?distro=focal | ubuntu | linux-image-intel-iotg-edge | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-5.15.0-1036-intel-iotg?distro=focal | ubuntu | linux-image-5.15.0-1036-intel-iotg | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-headers-intel?distro=focal | ubuntu | linux-headers-intel | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-headers-intel-iotg?distro=focal | ubuntu | linux-headers-intel-iotg | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-headers-intel-iotg-edge?distro=focal | ubuntu | linux-headers-intel-iotg-edge | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-headers-5.15.0-1036-intel-iotg?distro=focal | ubuntu | linux-headers-5.15.0-1036-intel-iotg | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-cloud-tools-intel?distro=focal | ubuntu | linux-cloud-tools-intel | < 5.15.0.1036.41~20.04.26 | focal | ||
Affected | pkg:deb/ubuntu/linux-cloud-tools-5.15.0-1036-intel-iotg?distro=focal | ubuntu | linux-cloud-tools-5.15.0-1036-intel-iotg | < 5.15.0-1036.41~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-buildinfo-5.15.0-1036-intel-iotg?distro=focal | ubuntu | linux-buildinfo-5.15.0-1036-intel-iotg | < 5.15.0-1036.41~20.04.1 | focal |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |