[USN-6502-2] Linux kernel (Oracle) vulnerabilities

Severity Critical

Affected Packages 15

CVEs 5

Several security issues were fixed in the Linux kernel.

Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem
discovered that the InfiniBand RDMA driver in the Linux kernel did not
properly check for zero-length STAG or MR registration. A remote attacker
could possibly use this to execute arbitrary code. (CVE-2023-25775)

Yu Hao discovered that the UBI driver in the Linux kernel did not properly
check for MTD with zero erasesize during device attachment. A local
privileged attacker could use this to cause a denial of service (system
crash). (CVE-2023-31085)

Manfred Rudigier discovered that the Intel(R) PCI-Express Gigabit (igb)
Ethernet driver in the Linux kernel did not properly validate received
frames that are larger than the set MTU size, leading to a buffer overflow
vulnerability. An attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-45871)

Maxim Levitsky discovered that the KVM nested virtualization (SVM)
implementation for AMD processors in the Linux kernel did not properly
handle x2AVIC MSRs. An attacker in a guest VM could use this to cause a
denial of service (host kernel crash). (CVE-2023-5090)

It was discovered that the SMB network file sharing protocol implementation
in the Linux kernel did not properly handle certain error conditions,
leading to a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2023-5345)

Package	Affected Version
pkg:deb/ubuntu/linux-tools-oracle?distro=lunar	< 6.2.0.1016.16
pkg:deb/ubuntu/linux-tools-6.2.0-1016-oracle?distro=lunar	< 6.2.0-1016.17
pkg:deb/ubuntu/linux-oracle?distro=lunar	< 6.2.0.1016.16
pkg:deb/ubuntu/linux-oracle-tools-6.2.0-1016?distro=lunar	< 6.2.0-1016.17
pkg:deb/ubuntu/linux-oracle-headers-6.2.0-1016?distro=lunar	< 6.2.0-1016.17
pkg:deb/ubuntu/linux-modules-iwlwifi-oracle?distro=lunar	< 6.2.0.1016.16
pkg:deb/ubuntu/linux-modules-iwlwifi-6.2.0-1016-oracle?distro=lunar	< 6.2.0-1016.17
pkg:deb/ubuntu/linux-modules-extra-6.2.0-1016-oracle?distro=lunar	< 6.2.0-1016.17
pkg:deb/ubuntu/linux-modules-6.2.0-1016-oracle?distro=lunar	< 6.2.0-1016.17
pkg:deb/ubuntu/linux-image-unsigned-6.2.0-1016-oracle?distro=lunar	< 6.2.0-1016.17
pkg:deb/ubuntu/linux-image-oracle?distro=lunar	< 6.2.0.1016.16
pkg:deb/ubuntu/linux-image-6.2.0-1016-oracle?distro=lunar	< 6.2.0-1016.17
pkg:deb/ubuntu/linux-headers-oracle?distro=lunar	< 6.2.0.1016.16
pkg:deb/ubuntu/linux-headers-6.2.0-1016-oracle?distro=lunar	< 6.2.0-1016.17
pkg:deb/ubuntu/linux-buildinfo-6.2.0-1016-oracle?distro=lunar	< 6.2.0-1016.17

ID

USN-6502-2

Severity

critical

Severity from

CVE-2023-25775

URL

https://ubuntu.com/security/notices/USN-6502-2

Published

2023-11-27T14:08:08
(9 months ago)

Modified

2023-11-27T14:08:08
(9 months ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/linux-tools-oracle?distro=lunar	ubuntu	linux-tools-oracle	< 6.2.0.1016.16	lunar
Affected	pkg:deb/ubuntu/linux-tools-6.2.0-1016-oracle?distro=lunar	ubuntu	linux-tools-6.2.0-1016-oracle	< 6.2.0-1016.17	lunar
Affected	pkg:deb/ubuntu/linux-oracle?distro=lunar	ubuntu	linux-oracle	< 6.2.0.1016.16	lunar
Affected	pkg:deb/ubuntu/linux-oracle-tools-6.2.0-1016?distro=lunar	ubuntu	linux-oracle-tools-6.2.0-1016	< 6.2.0-1016.17	lunar
Affected	pkg:deb/ubuntu/linux-oracle-headers-6.2.0-1016?distro=lunar	ubuntu	linux-oracle-headers-6.2.0-1016	< 6.2.0-1016.17	lunar
Affected	pkg:deb/ubuntu/linux-modules-iwlwifi-oracle?distro=lunar	ubuntu	linux-modules-iwlwifi-oracle	< 6.2.0.1016.16	lunar
Affected	pkg:deb/ubuntu/linux-modules-iwlwifi-6.2.0-1016-oracle?distro=lunar	ubuntu	linux-modules-iwlwifi-6.2.0-1016-oracle	< 6.2.0-1016.17	lunar
Affected	pkg:deb/ubuntu/linux-modules-extra-6.2.0-1016-oracle?distro=lunar	ubuntu	linux-modules-extra-6.2.0-1016-oracle	< 6.2.0-1016.17	lunar
Affected	pkg:deb/ubuntu/linux-modules-6.2.0-1016-oracle?distro=lunar	ubuntu	linux-modules-6.2.0-1016-oracle	< 6.2.0-1016.17	lunar
Affected	pkg:deb/ubuntu/linux-image-unsigned-6.2.0-1016-oracle?distro=lunar	ubuntu	linux-image-unsigned-6.2.0-1016-oracle	< 6.2.0-1016.17	lunar
Affected	pkg:deb/ubuntu/linux-image-oracle?distro=lunar	ubuntu	linux-image-oracle	< 6.2.0.1016.16	lunar
Affected	pkg:deb/ubuntu/linux-image-6.2.0-1016-oracle?distro=lunar	ubuntu	linux-image-6.2.0-1016-oracle	< 6.2.0-1016.17	lunar
Affected	pkg:deb/ubuntu/linux-headers-oracle?distro=lunar	ubuntu	linux-headers-oracle	< 6.2.0.1016.16	lunar
Affected	pkg:deb/ubuntu/linux-headers-6.2.0-1016-oracle?distro=lunar	ubuntu	linux-headers-6.2.0-1016-oracle	< 6.2.0-1016.17	lunar
Affected	pkg:deb/ubuntu/linux-buildinfo-6.2.0-1016-oracle?distro=lunar	ubuntu	linux-buildinfo-6.2.0-1016-oracle	< 6.2.0-1016.17	lunar

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date