1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6625-2

[USN-6625-2] Linux kernel (GCP) vulnerabilities

Severity High
Affected Packages 33
CVEs 4
Info Packages Vulnerabilities

Several security issues were fixed in the Linux kernel.

Marek Marczykowski-Górecki discovered that the Xen event channel
infrastructure implementation in the Linux kernel contained a race
condition. An attacker in a guest VM could possibly use this to cause a
denial of service (paravirtualized device unavailability). (CVE-2023-34324)

Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver
in the Linux kernel during device removal. A privileged attacker could use
this to cause a denial of service (system crash). (CVE-2023-35827)

It was discovered that a race condition existed in the Linux kernel when
performing operations with kernel objects, leading to an out-of-bounds
write. A local attacker could use this to cause a denial of service (system
crash) or execute arbitrary code. (CVE-2023-45863)

黄思聪 discovered that the NFC Controller Interface (NCI) implementation in
the Linux kernel did not properly handle certain memory allocation failure
conditions, leading to a null pointer dereference vulnerability. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2023-46343)

Package Affected Version
pkg:deb/ubuntu/linux-tools-gcp?distro=bionic < 5.4.0.1122.98
pkg:deb/ubuntu/linux-tools-gcp-lts-20.04?distro=focal < 5.4.0.1122.124
pkg:deb/ubuntu/linux-tools-gcp-edge?distro=bionic < 5.4.0.1122.98
pkg:deb/ubuntu/linux-tools-5.4.0-1122-gcp?distro=focal < 5.4.0-1122.131
pkg:deb/ubuntu/linux-tools-5.4.0-1122-gcp?distro=bionic < 5.4.0-1122.131~18.04.1
pkg:deb/ubuntu/linux-modules-extra-gcp?distro=bionic < 5.4.0.1122.98
pkg:deb/ubuntu/linux-modules-extra-gcp-lts-20.04?distro=focal < 5.4.0.1122.124
pkg:deb/ubuntu/linux-modules-extra-gcp-edge?distro=bionic < 5.4.0.1122.98
pkg:deb/ubuntu/linux-modules-extra-5.4.0-1122-gcp?distro=focal < 5.4.0-1122.131
pkg:deb/ubuntu/linux-modules-extra-5.4.0-1122-gcp?distro=bionic < 5.4.0-1122.131~18.04.1
pkg:deb/ubuntu/linux-modules-5.4.0-1122-gcp?distro=focal < 5.4.0-1122.131
pkg:deb/ubuntu/linux-modules-5.4.0-1122-gcp?distro=bionic < 5.4.0-1122.131~18.04.1
pkg:deb/ubuntu/linux-image-unsigned-5.4.0-1122-gcp?distro=focal < 5.4.0-1122.131
pkg:deb/ubuntu/linux-image-unsigned-5.4.0-1122-gcp?distro=bionic < 5.4.0-1122.131~18.04.1
pkg:deb/ubuntu/linux-image-gcp?distro=bionic < 5.4.0.1122.98
pkg:deb/ubuntu/linux-image-gcp-lts-20.04?distro=focal < 5.4.0.1122.124
pkg:deb/ubuntu/linux-image-gcp-edge?distro=bionic < 5.4.0.1122.98
pkg:deb/ubuntu/linux-image-5.4.0-1122-gcp?distro=focal < 5.4.0-1122.131
pkg:deb/ubuntu/linux-image-5.4.0-1122-gcp?distro=bionic < 5.4.0-1122.131~18.04.1
pkg:deb/ubuntu/linux-headers-gcp?distro=bionic < 5.4.0.1122.98
pkg:deb/ubuntu/linux-headers-gcp-lts-20.04?distro=focal < 5.4.0.1122.124
pkg:deb/ubuntu/linux-headers-gcp-edge?distro=bionic < 5.4.0.1122.98
pkg:deb/ubuntu/linux-headers-5.4.0-1122-gcp?distro=focal < 5.4.0-1122.131
pkg:deb/ubuntu/linux-headers-5.4.0-1122-gcp?distro=bionic < 5.4.0-1122.131~18.04.1
pkg:deb/ubuntu/linux-gcp?distro=bionic < 5.4.0.1122.98
pkg:deb/ubuntu/linux-gcp-tools-5.4.0-1122?distro=focal < 5.4.0-1122.131
pkg:deb/ubuntu/linux-gcp-lts-20.04?distro=focal < 5.4.0.1122.124
pkg:deb/ubuntu/linux-gcp-headers-5.4.0-1122?distro=focal < 5.4.0-1122.131
pkg:deb/ubuntu/linux-gcp-edge?distro=bionic < 5.4.0.1122.98
pkg:deb/ubuntu/linux-gcp-5.4-tools-5.4.0-1122?distro=bionic < 5.4.0-1122.131~18.04.1
pkg:deb/ubuntu/linux-gcp-5.4-headers-5.4.0-1122?distro=bionic < 5.4.0-1122.131~18.04.1
pkg:deb/ubuntu/linux-buildinfo-5.4.0-1122-gcp?distro=focal < 5.4.0-1122.131
pkg:deb/ubuntu/linux-buildinfo-5.4.0-1122-gcp?distro=bionic < 5.4.0-1122.131~18.04.1
ID
USN-6625-2
Severity
high
Severity from
CVE-2023-35827
URL
https://ubuntu.com/security/notices/USN-6625-2
Published
2024-02-08T19:42:36
(7 months ago)
Modified
2024-02-08T19:42:36
(7 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/linux-tools-gcp?distro=bionic ubuntu linux-tools-gcp < 5.4.0.1122.98 bionic
Affected pkg:deb/ubuntu/linux-tools-gcp-lts-20.04?distro=focal ubuntu linux-tools-gcp-lts-20.04 < 5.4.0.1122.124 focal
Affected pkg:deb/ubuntu/linux-tools-gcp-edge?distro=bionic ubuntu linux-tools-gcp-edge < 5.4.0.1122.98 bionic
Affected pkg:deb/ubuntu/linux-tools-5.4.0-1122-gcp?distro=focal ubuntu linux-tools-5.4.0-1122-gcp < 5.4.0-1122.131 focal
Affected pkg:deb/ubuntu/linux-tools-5.4.0-1122-gcp?distro=bionic ubuntu linux-tools-5.4.0-1122-gcp < 5.4.0-1122.131~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-modules-extra-gcp?distro=bionic ubuntu linux-modules-extra-gcp < 5.4.0.1122.98 bionic
Affected pkg:deb/ubuntu/linux-modules-extra-gcp-lts-20.04?distro=focal ubuntu linux-modules-extra-gcp-lts-20.04 < 5.4.0.1122.124 focal
Affected pkg:deb/ubuntu/linux-modules-extra-gcp-edge?distro=bionic ubuntu linux-modules-extra-gcp-edge < 5.4.0.1122.98 bionic
Affected pkg:deb/ubuntu/linux-modules-extra-5.4.0-1122-gcp?distro=focal ubuntu linux-modules-extra-5.4.0-1122-gcp < 5.4.0-1122.131 focal
Affected pkg:deb/ubuntu/linux-modules-extra-5.4.0-1122-gcp?distro=bionic ubuntu linux-modules-extra-5.4.0-1122-gcp < 5.4.0-1122.131~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-modules-5.4.0-1122-gcp?distro=focal ubuntu linux-modules-5.4.0-1122-gcp < 5.4.0-1122.131 focal
Affected pkg:deb/ubuntu/linux-modules-5.4.0-1122-gcp?distro=bionic ubuntu linux-modules-5.4.0-1122-gcp < 5.4.0-1122.131~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-image-unsigned-5.4.0-1122-gcp?distro=focal ubuntu linux-image-unsigned-5.4.0-1122-gcp < 5.4.0-1122.131 focal
Affected pkg:deb/ubuntu/linux-image-unsigned-5.4.0-1122-gcp?distro=bionic ubuntu linux-image-unsigned-5.4.0-1122-gcp < 5.4.0-1122.131~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-image-gcp?distro=bionic ubuntu linux-image-gcp < 5.4.0.1122.98 bionic
Affected pkg:deb/ubuntu/linux-image-gcp-lts-20.04?distro=focal ubuntu linux-image-gcp-lts-20.04 < 5.4.0.1122.124 focal
Affected pkg:deb/ubuntu/linux-image-gcp-edge?distro=bionic ubuntu linux-image-gcp-edge < 5.4.0.1122.98 bionic
Affected pkg:deb/ubuntu/linux-image-5.4.0-1122-gcp?distro=focal ubuntu linux-image-5.4.0-1122-gcp < 5.4.0-1122.131 focal
Affected pkg:deb/ubuntu/linux-image-5.4.0-1122-gcp?distro=bionic ubuntu linux-image-5.4.0-1122-gcp < 5.4.0-1122.131~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-headers-gcp?distro=bionic ubuntu linux-headers-gcp < 5.4.0.1122.98 bionic
Affected pkg:deb/ubuntu/linux-headers-gcp-lts-20.04?distro=focal ubuntu linux-headers-gcp-lts-20.04 < 5.4.0.1122.124 focal
Affected pkg:deb/ubuntu/linux-headers-gcp-edge?distro=bionic ubuntu linux-headers-gcp-edge < 5.4.0.1122.98 bionic
Affected pkg:deb/ubuntu/linux-headers-5.4.0-1122-gcp?distro=focal ubuntu linux-headers-5.4.0-1122-gcp < 5.4.0-1122.131 focal
Affected pkg:deb/ubuntu/linux-headers-5.4.0-1122-gcp?distro=bionic ubuntu linux-headers-5.4.0-1122-gcp < 5.4.0-1122.131~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-gcp?distro=bionic ubuntu linux-gcp < 5.4.0.1122.98 bionic
Affected pkg:deb/ubuntu/linux-gcp-tools-5.4.0-1122?distro=focal ubuntu linux-gcp-tools-5.4.0-1122 < 5.4.0-1122.131 focal
Affected pkg:deb/ubuntu/linux-gcp-lts-20.04?distro=focal ubuntu linux-gcp-lts-20.04 < 5.4.0.1122.124 focal
Affected pkg:deb/ubuntu/linux-gcp-headers-5.4.0-1122?distro=focal ubuntu linux-gcp-headers-5.4.0-1122 < 5.4.0-1122.131 focal
Affected pkg:deb/ubuntu/linux-gcp-edge?distro=bionic ubuntu linux-gcp-edge < 5.4.0.1122.98 bionic
Affected pkg:deb/ubuntu/linux-gcp-5.4-tools-5.4.0-1122?distro=bionic ubuntu linux-gcp-5.4-tools-5.4.0-1122 < 5.4.0-1122.131~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-gcp-5.4-headers-5.4.0-1122?distro=bionic ubuntu linux-gcp-5.4-headers-5.4.0-1122 < 5.4.0-1122.131~18.04.1 bionic
Affected pkg:deb/ubuntu/linux-buildinfo-5.4.0-1122-gcp?distro=focal ubuntu linux-buildinfo-5.4.0-1122-gcp < 5.4.0-1122.131 focal
Affected pkg:deb/ubuntu/linux-buildinfo-5.4.0-1122-gcp?distro=bionic ubuntu linux-buildinfo-5.4.0-1122-gcp < 5.4.0-1122.131~18.04.1 bionic
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date