[USN-6465-2] Linux kernel (Raspberry Pi) vulnerabilities

Severity Medium

Affected Packages 18

CVEs 2

Several security issues were fixed in the Linux kernel.

Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in
the Linux kernel contained a race condition, leading to a null pointer
dereference vulnerability. A local attacker could use this to cause a
denial of service (system crash). (CVE-2023-31083)

Lin Ma discovered that the Netlink Transformation (XFRM) subsystem in the
Linux kernel contained a null pointer dereference vulnerability in some
situations. A local privileged attacker could use this to cause a denial of
service (system crash). (CVE-2023-3772)

Package	Affected Version
pkg:deb/ubuntu/linux-tools-raspi?distro=jammy	< 5.15.0.1042.40
pkg:deb/ubuntu/linux-tools-raspi-nolpae?distro=jammy	< 5.15.0.1042.40
pkg:deb/ubuntu/linux-tools-5.15.0-1042-raspi?distro=jammy	< 5.15.0-1042.45
pkg:deb/ubuntu/linux-raspi?distro=jammy	< 5.15.0.1042.40
pkg:deb/ubuntu/linux-raspi-tools-5.15.0-1042?distro=jammy	< 5.15.0-1042.45
pkg:deb/ubuntu/linux-raspi-nolpae?distro=jammy	< 5.15.0.1042.40
pkg:deb/ubuntu/linux-raspi-headers-5.15.0-1042?distro=jammy	< 5.15.0-1042.45
pkg:deb/ubuntu/linux-modules-extra-raspi?distro=jammy	< 5.15.0.1042.40
pkg:deb/ubuntu/linux-modules-extra-raspi-nolpae?distro=jammy	< 5.15.0.1042.40
pkg:deb/ubuntu/linux-modules-extra-5.15.0-1042-raspi?distro=jammy	< 5.15.0-1042.45
pkg:deb/ubuntu/linux-modules-5.15.0-1042-raspi?distro=jammy	< 5.15.0-1042.45
pkg:deb/ubuntu/linux-image-raspi?distro=jammy	< 5.15.0.1042.40
pkg:deb/ubuntu/linux-image-raspi-nolpae?distro=jammy	< 5.15.0.1042.40
pkg:deb/ubuntu/linux-image-5.15.0-1042-raspi?distro=jammy	< 5.15.0-1042.45
pkg:deb/ubuntu/linux-headers-raspi?distro=jammy	< 5.15.0.1042.40
pkg:deb/ubuntu/linux-headers-raspi-nolpae?distro=jammy	< 5.15.0.1042.40
pkg:deb/ubuntu/linux-headers-5.15.0-1042-raspi?distro=jammy	< 5.15.0-1042.45
pkg:deb/ubuntu/linux-buildinfo-5.15.0-1042-raspi?distro=jammy	< 5.15.0-1042.45

ID

USN-6465-2

Severity

medium

Severity from

CVE-2023-31083

URL

https://ubuntu.com/security/notices/USN-6465-2

Published

2023-11-01T12:39:24
(10 months ago)

Modified

2023-11-01T12:39:24
(10 months ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/linux-tools-raspi?distro=jammy	ubuntu	linux-tools-raspi	< 5.15.0.1042.40	jammy
Affected	pkg:deb/ubuntu/linux-tools-raspi-nolpae?distro=jammy	ubuntu	linux-tools-raspi-nolpae	< 5.15.0.1042.40	jammy
Affected	pkg:deb/ubuntu/linux-tools-5.15.0-1042-raspi?distro=jammy	ubuntu	linux-tools-5.15.0-1042-raspi	< 5.15.0-1042.45	jammy
Affected	pkg:deb/ubuntu/linux-raspi?distro=jammy	ubuntu	linux-raspi	< 5.15.0.1042.40	jammy
Affected	pkg:deb/ubuntu/linux-raspi-tools-5.15.0-1042?distro=jammy	ubuntu	linux-raspi-tools-5.15.0-1042	< 5.15.0-1042.45	jammy
Affected	pkg:deb/ubuntu/linux-raspi-nolpae?distro=jammy	ubuntu	linux-raspi-nolpae	< 5.15.0.1042.40	jammy
Affected	pkg:deb/ubuntu/linux-raspi-headers-5.15.0-1042?distro=jammy	ubuntu	linux-raspi-headers-5.15.0-1042	< 5.15.0-1042.45	jammy
Affected	pkg:deb/ubuntu/linux-modules-extra-raspi?distro=jammy	ubuntu	linux-modules-extra-raspi	< 5.15.0.1042.40	jammy
Affected	pkg:deb/ubuntu/linux-modules-extra-raspi-nolpae?distro=jammy	ubuntu	linux-modules-extra-raspi-nolpae	< 5.15.0.1042.40	jammy
Affected	pkg:deb/ubuntu/linux-modules-extra-5.15.0-1042-raspi?distro=jammy	ubuntu	linux-modules-extra-5.15.0-1042-raspi	< 5.15.0-1042.45	jammy
Affected	pkg:deb/ubuntu/linux-modules-5.15.0-1042-raspi?distro=jammy	ubuntu	linux-modules-5.15.0-1042-raspi	< 5.15.0-1042.45	jammy
Affected	pkg:deb/ubuntu/linux-image-raspi?distro=jammy	ubuntu	linux-image-raspi	< 5.15.0.1042.40	jammy
Affected	pkg:deb/ubuntu/linux-image-raspi-nolpae?distro=jammy	ubuntu	linux-image-raspi-nolpae	< 5.15.0.1042.40	jammy
Affected	pkg:deb/ubuntu/linux-image-5.15.0-1042-raspi?distro=jammy	ubuntu	linux-image-5.15.0-1042-raspi	< 5.15.0-1042.45	jammy
Affected	pkg:deb/ubuntu/linux-headers-raspi?distro=jammy	ubuntu	linux-headers-raspi	< 5.15.0.1042.40	jammy
Affected	pkg:deb/ubuntu/linux-headers-raspi-nolpae?distro=jammy	ubuntu	linux-headers-raspi-nolpae	< 5.15.0.1042.40	jammy
Affected	pkg:deb/ubuntu/linux-headers-5.15.0-1042-raspi?distro=jammy	ubuntu	linux-headers-5.15.0-1042-raspi	< 5.15.0-1042.45	jammy
Affected	pkg:deb/ubuntu/linux-buildinfo-5.15.0-1042-raspi?distro=jammy	ubuntu	linux-buildinfo-5.15.0-1042-raspi	< 5.15.0-1042.45	jammy

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date