[USN-6725-2] Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel
did not properly validate certain data structure fields when parsing lease
contexts, leading to an out-of-bounds read vulnerability. A remote attacker
could use this to cause a denial of service (system crash) or possibly
expose sensitive information. (CVE-2023-1194)
Quentin Minster discovered that a race condition existed in the KSMBD
implementation in the Linux kernel, leading to a use-after-free
vulnerability. A remote attacker could use this to cause a denial of
service (system crash) or possibly execute arbitrary code. (CVE-2023-32254)
It was discovered that a race condition existed in the KSMBD implementation
in the Linux kernel when handling session connections, leading to a use-
after-free vulnerability. A remote attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2023-32258)
It was discovered that the KSMBD implementation in the Linux kernel did not
properly validate buffer sizes in certain operations, leading to an integer
underflow and out-of-bounds read vulnerability. A remote attacker could use
this to cause a denial of service (system crash) or possibly expose
sensitive information. (CVE-2023-38427)
Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel
did not properly validate SMB request protocol IDs, leading to a out-of-
bounds read vulnerability. A remote attacker could possibly use this to
cause a denial of service (system crash). (CVE-2023-38430)
Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel
did not properly validate packet header sizes in certain situations,
leading to an out-of-bounds read vulnerability. A remote attacker could use
this to cause a denial of service (system crash) or possibly expose
sensitive information. (CVE-2023-38431)
It was discovered that the KSMBD implementation in the Linux kernel did not
properly handle session setup requests, leading to an out-of-bounds read
vulnerability. A remote attacker could use this to expose sensitive
information. (CVE-2023-3867)
Pratyush Yadav discovered that the Xen network backend implementation in
the Linux kernel did not properly handle zero length data request, leading
to a null pointer dereference vulnerability. An attacker in a guest VM
could possibly use this to cause a denial of service (host domain crash).
(CVE-2023-46838)
It was discovered that the IPv6 implementation of the Linux kernel did not
properly manage route cache memory usage. A remote attacker could use this
to cause a denial of service (memory exhaustion). (CVE-2023-52340)
It was discovered that the device mapper driver in the Linux kernel did not
properly validate target size during certain memory allocations. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2023-52429, CVE-2024-23851)
Yang Chaoming discovered that the KSMBD implementation in the Linux kernel
did not properly validate request buffer sizes, leading to an out-of-bounds
read vulnerability. An attacker could use this to cause a denial of service
(system crash) or possibly expose sensitive information. (CVE-2024-22705)
Chenyuan Yang discovered that the btrfs file system in the Linux kernel did
not properly handle read operations on newly created subvolumes in certain
conditions. A local attacker could use this to cause a denial of service
(system crash). (CVE-2024-23850)
It was discovered that a race condition existed in the Bluetooth subsystem
in the Linux kernel, leading to a null pointer dereference vulnerability. A
privileged local attacker could use this to possibly cause a denial of
service (system crash). (CVE-2024-24860)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Architecture specifics;
- Block layer;
- Cryptographic API;
- Android drivers;
- EDAC drivers;
- GPU drivers;
- Media drivers;
- Multifunction device drivers;
- MTD block device drivers;
- Network drivers;
- NVME drivers;
- TTY drivers;
- Userspace I/O drivers;
- EFI Variable file system;
- F2FS file system;
- GFS2 file system;
- SMB network file system;
- BPF subsystem;
- IPv6 Networking;
- Network Traffic Control;
- AppArmor security module;
(CVE-2023-52463, CVE-2023-52445, CVE-2023-52462, CVE-2023-52609,
CVE-2023-52448, CVE-2023-52457, CVE-2023-52464, CVE-2023-52456,
CVE-2023-52454, CVE-2023-52438, CVE-2023-52480, CVE-2023-52443,
CVE-2023-52442, CVE-2024-26631, CVE-2023-52439, CVE-2023-52612,
CVE-2024-26598, CVE-2024-26586, CVE-2024-26589, CVE-2023-52444,
CVE-2023-52436, CVE-2024-26633, CVE-2024-26597, CVE-2023-52458,
CVE-2024-26591, CVE-2023-52449, CVE-2023-52467, CVE-2023-52441,
CVE-2023-52610, CVE-2023-52451, CVE-2023-52469, CVE-2023-52470)
- ID
- USN-6725-2
- Severity
- critical
- Severity from
- CVE-2023-38427
- URL
- https://ubuntu.com/security/notices/USN-6725-2
- Published
-
2024-04-16T20:56:05
(4 months ago) - Modified
-
2024-04-16T20:56:05
(4 months ago) - Other Advisories
-
-
ALAS-2024-1899
-
ALAS2-2024-2391
-
ALAS2-2024-2475
-
ALAS2-2024-2549
-
ALPINE:CVE-2023-46838
-
ALSA-2024:3138
-
ALSA-2024:3618
-
ALSA-2024:4211
-
ALSA-2024:5101
-
DSA-5448-1
-
DSA-5681-1
-
ELSA-2024-12606
-
ELSA-2024-2394
-
ELSA-2024-3138
-
ELSA-2024-3618
-
ELSA-2024-4211
-
ELSA-2024-4928
-
ELSA-2024-5101
-
FEDORA-2024-0f89e13079
-
FEDORA-2024-50ab089b1d
-
FEDORA-2024-88847bc77a
-
FEDORA-2024-987089eca2
-
FEDORA-2024-d16d94b00d
-
RHSA-2024:2950
-
RHSA-2024:3138
-
RHSA-2024:3618
-
RHSA-2024:3627
-
RHSA-2024:4211
-
RHSA-2024:4352
-
RHSA-2024:5101
-
RHSA-2024:5102
-
RLSA-2024:3138
-
RLSA-2024:3618
-
RLSA-2024:4211
-
RLSA-2024:4928
-
RLSA-2024:5101
-
SSA:2024-157-01
-
SUSE-SU-2024:0463-1
-
SUSE-SU-2024:0468-1
-
SUSE-SU-2024:0469-1
-
SUSE-SU-2024:0474-1
-
SUSE-SU-2024:0476-1
-
SUSE-SU-2024:0478-1
-
SUSE-SU-2024:0483-1
-
SUSE-SU-2024:0484-1
-
SUSE-SU-2024:0514-1
-
SUSE-SU-2024:0515-1
-
SUSE-SU-2024:0516-1
-
SUSE-SU-2024:0855-1
-
SUSE-SU-2024:0856-1
-
SUSE-SU-2024:0857-1
-
SUSE-SU-2024:0858-1
-
SUSE-SU-2024:0900-1
-
SUSE-SU-2024:0900-2
-
SUSE-SU-2024:0910-1
-
SUSE-SU-2024:0925-1
-
SUSE-SU-2024:0926-1
-
SUSE-SU-2024:0975-1
-
SUSE-SU-2024:0976-1
-
SUSE-SU-2024:0977-1
-
SUSE-SU-2024:1181-1
-
SUSE-SU-2024:1183-1
-
SUSE-SU-2024:1184-1
-
SUSE-SU-2024:1207-1
-
SUSE-SU-2024:1229-1
-
SUSE-SU-2024:1236-1
-
SUSE-SU-2024:1239-1
-
SUSE-SU-2024:1246-1
-
SUSE-SU-2024:1248-1
-
SUSE-SU-2024:1249-1
-
SUSE-SU-2024:1251-1
-
SUSE-SU-2024:1252-1
-
SUSE-SU-2024:1257-1
-
SUSE-SU-2024:1273-1
-
SUSE-SU-2024:1274-1
-
SUSE-SU-2024:1278-1
-
SUSE-SU-2024:1280-1
-
SUSE-SU-2024:1288-1
-
SUSE-SU-2024:1292-1
-
SUSE-SU-2024:1298-1
-
SUSE-SU-2024:1299-1
-
SUSE-SU-2024:1312-1
-
SUSE-SU-2024:1318-1
-
SUSE-SU-2024:1320-1
-
SUSE-SU-2024:1321-1
-
SUSE-SU-2024:1322-1
-
SUSE-SU-2024:1362-1
-
SUSE-SU-2024:1409-1
-
SUSE-SU-2024:1411-1
-
SUSE-SU-2024:1454-1
-
SUSE-SU-2024:1465-1
-
SUSE-SU-2024:1466-1
-
SUSE-SU-2024:1480-1
-
SUSE-SU-2024:1489-1
-
SUSE-SU-2024:1490-1
-
SUSE-SU-2024:1641-1
-
SUSE-SU-2024:1643-1
-
SUSE-SU-2024:1644-1
-
SUSE-SU-2024:1646-1
-
SUSE-SU-2024:1647-1
-
SUSE-SU-2024:1648-1
-
SUSE-SU-2024:1659-1
-
SUSE-SU-2024:1663-1
-
SUSE-SU-2024:1669-1
-
SUSE-SU-2024:1682-1
-
SUSE-SU-2024:1711-1
-
SUSE-SU-2024:1749-1
-
SUSE-SU-2024:1870-1
-
SUSE-SU-2024:2008-1
-
SUSE-SU-2024:2019-1
-
SUSE-SU-2024:2092-1
-
SUSE-SU-2024:2135-1
-
SUSE-SU-2024:2162-1
-
SUSE-SU-2024:2190-1
-
SUSE-SU-2024:2203-1
-
SUSE-SU-2024:2207-1
-
SUSE-SU-2024:2337-1
-
SUSE-SU-2024:2360-1
-
SUSE-SU-2024:2381-1
-
SUSE-SU-2024:2446-1
-
SUSE-SU-2024:2561-1
-
SUSE-SU-2024:2722-1
-
SUSE-SU-2024:2802-1
-
SUSE-SU-2024:2824-1
-
SUSE-SU-2024:2850-1
-
SUSE-SU-2024:2892-1
-
SUSE-SU-2024:2894-1
-
SUSE-SU-2024:2896-1
-
SUSE-SU-2024:2901-1
-
SUSE-SU-2024:2939-1
-
SUSE-SU-2024:2940-1
-
SUSE-SU-2024:2947-1
-
SUSE-SU-2024:2973-1
-
USN-6173-1
-
USN-6283-1
-
USN-6285-1
-
USN-6338-1
-
USN-6338-2
-
USN-6344-1
-
USN-6412-1
-
USN-6464-1
-
USN-6466-1
-
USN-6520-1
-
USN-6639-1
-
USN-6688-1
-
USN-6701-1
-
USN-6701-2
-
USN-6701-3
-
USN-6701-4
-
USN-6707-1
-
USN-6707-2
-
USN-6707-3
-
USN-6707-4
-
USN-6724-1
-
USN-6724-2
-
USN-6725-1
-
USN-6726-1
-
USN-6726-2
-
USN-6726-3
-
USN-6739-1
-
USN-6740-1
-
USN-6741-1
-
USN-6743-1
-
USN-6743-2
-
USN-6743-3
-
USN-6765-1
-
USN-6767-1
-
USN-6767-2
-
USN-6777-1
-
USN-6777-2
-
USN-6777-3
-
USN-6777-4
-
USN-6818-1
-
USN-6818-2
-
USN-6818-3
-
USN-6818-4
-
USN-6819-1
-
USN-6819-2
-
USN-6819-3
-
USN-6819-4
-
USN-6896-1
-
USN-6896-2
-
USN-6896-3
-
USN-6896-4
-
USN-6896-5
-
USN-6926-1
-
USN-6926-2
-
USN-6926-3
-
USN-6938-1
-
USN-6972-1
-
USN-6972-2
-
USN-6972-3
-
USN-6972-4
-
USN-6973-1
-
USN-6973-2
-
USN-6973-3
-
USN-6973-4
-
USN-6976-1
-
XSA-448
-
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:deb/ubuntu/linux-tools-aws?distro=focal | ubuntu |
![]() |
< 5.15.0.1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-tools-aws-lts-22.04?distro=jammy | ubuntu |
![]() |
< 5.15.0.1057.58 | jammy | ||
Affected | pkg:deb/ubuntu/linux-tools-aws-edge?distro=focal | ubuntu |
![]() |
< 5.15.0.1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-tools-5.15.0-1057-aws?distro=jammy | ubuntu |
![]() |
< 5.15.0-1057.63 | jammy | ||
Affected | pkg:deb/ubuntu/linux-tools-5.15.0-1057-aws?distro=focal | ubuntu |
![]() |
< 5.15.0-1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-modules-extra-aws?distro=focal | ubuntu |
![]() |
< 5.15.0.1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-modules-extra-aws-lts-22.04?distro=jammy | ubuntu |
![]() |
< 5.15.0.1057.58 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-extra-aws-edge?distro=focal | ubuntu |
![]() |
< 5.15.0.1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-modules-extra-5.15.0-1057-aws?distro=jammy | ubuntu |
![]() |
< 5.15.0-1057.63 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-extra-5.15.0-1057-aws?distro=focal | ubuntu |
![]() |
< 5.15.0-1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-modules-5.15.0-1057-aws?distro=jammy | ubuntu |
![]() |
< 5.15.0-1057.63 | jammy | ||
Affected | pkg:deb/ubuntu/linux-modules-5.15.0-1057-aws?distro=focal | ubuntu |
![]() |
< 5.15.0-1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-unsigned-5.15.0-1057-aws?distro=jammy | ubuntu |
![]() |
< 5.15.0-1057.63 | jammy | ||
Affected | pkg:deb/ubuntu/linux-image-unsigned-5.15.0-1057-aws?distro=focal | ubuntu |
![]() |
< 5.15.0-1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-aws?distro=focal | ubuntu |
![]() |
< 5.15.0.1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-aws-lts-22.04?distro=jammy | ubuntu |
![]() |
< 5.15.0.1057.58 | jammy | ||
Affected | pkg:deb/ubuntu/linux-image-aws-edge?distro=focal | ubuntu |
![]() |
< 5.15.0.1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-5.15.0-1057-aws?distro=jammy | ubuntu |
![]() |
< 5.15.0-1057.63 | jammy | ||
Affected | pkg:deb/ubuntu/linux-image-5.15.0-1057-aws?distro=focal | ubuntu |
![]() |
< 5.15.0-1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-headers-aws?distro=focal | ubuntu |
![]() |
< 5.15.0.1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-headers-aws-lts-22.04?distro=jammy | ubuntu |
![]() |
< 5.15.0.1057.58 | jammy | ||
Affected | pkg:deb/ubuntu/linux-headers-aws-edge?distro=focal | ubuntu |
![]() |
< 5.15.0.1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-headers-5.15.0-1057-aws?distro=jammy | ubuntu |
![]() |
< 5.15.0-1057.63 | jammy | ||
Affected | pkg:deb/ubuntu/linux-headers-5.15.0-1057-aws?distro=focal | ubuntu |
![]() |
< 5.15.0-1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-cloud-tools-5.15.0-1057-aws?distro=jammy | ubuntu |
![]() |
< 5.15.0-1057.63 | jammy | ||
Affected | pkg:deb/ubuntu/linux-cloud-tools-5.15.0-1057-aws?distro=focal | ubuntu |
![]() |
< 5.15.0-1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-buildinfo-5.15.0-1057-aws?distro=jammy | ubuntu |
![]() |
< 5.15.0-1057.63 | jammy | ||
Affected | pkg:deb/ubuntu/linux-buildinfo-5.15.0-1057-aws?distro=focal | ubuntu |
![]() |
< 5.15.0-1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-aws?distro=focal | ubuntu |
![]() |
< 5.15.0.1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-aws-tools-5.15.0-1057?distro=jammy | ubuntu |
![]() |
< 5.15.0-1057.63 | jammy | ||
Affected | pkg:deb/ubuntu/linux-aws-lts-22.04?distro=jammy | ubuntu |
![]() |
< 5.15.0.1057.58 | jammy | ||
Affected | pkg:deb/ubuntu/linux-aws-headers-5.15.0-1057?distro=jammy | ubuntu |
![]() |
< 5.15.0-1057.63 | jammy | ||
Affected | pkg:deb/ubuntu/linux-aws-edge?distro=focal | ubuntu |
![]() |
< 5.15.0.1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-aws-cloud-tools-5.15.0-1057?distro=jammy | ubuntu |
![]() |
< 5.15.0-1057.63 | jammy | ||
Affected | pkg:deb/ubuntu/linux-aws-5.15-tools-5.15.0-1057?distro=focal | ubuntu |
![]() |
< 5.15.0-1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-aws-5.15-headers-5.15.0-1057?distro=focal | ubuntu |
![]() |
< 5.15.0-1057.63~20.04.1 | focal | ||
Affected | pkg:deb/ubuntu/linux-aws-5.15-cloud-tools-5.15.0-1057?distro=focal | ubuntu |
![]() |
< 5.15.0-1057.63~20.04.1 | focal |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |