1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6726-3

[USN-6726-3] Linux kernel (Xilinx ZynqMP) vulnerabilities

Severity High
Affected Packages 11
CVEs 23
Info Packages Vulnerabilities

Several security issues were fixed in the Linux kernel.

Pratyush Yadav discovered that the Xen network backend implementation in
the Linux kernel did not properly handle zero length data request, leading
to a null pointer dereference vulnerability. An attacker in a guest VM
could possibly use this to cause a denial of service (host domain crash).
(CVE-2023-46838)

It was discovered that the IPv6 implementation of the Linux kernel did not
properly manage route cache memory usage. A remote attacker could use this
to cause a denial of service (memory exhaustion). (CVE-2023-52340)

It was discovered that the device mapper driver in the Linux kernel did not
properly validate target size during certain memory allocations. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2023-52429, CVE-2024-23851)

Dan Carpenter discovered that the netfilter subsystem in the Linux kernel
did not store data in properly sized memory locations. A local user could
use this to cause a denial of service (system crash). (CVE-2024-0607)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Architecture specifics;
- Cryptographic API;
- Android drivers;
- EDAC drivers;
- GPU drivers;
- Media drivers;
- MTD block device drivers;
- Network drivers;
- NVME drivers;
- TTY drivers;
- Userspace I/O drivers;
- F2FS file system;
- GFS2 file system;
- IPv6 Networking;
- AppArmor security module;
(CVE-2023-52464, CVE-2023-52448, CVE-2023-52457, CVE-2023-52443,
CVE-2023-52439, CVE-2023-52612, CVE-2024-26633, CVE-2024-26597,
CVE-2023-52449, CVE-2023-52444, CVE-2023-52609, CVE-2023-52469,
CVE-2023-52445, CVE-2023-52451, CVE-2023-52470, CVE-2023-52454,
CVE-2023-52436, CVE-2023-52438)

Package Affected Version
pkg:deb/ubuntu/linux-xilinx-zynqmp?distro=focal < 5.4.0.1041.41
pkg:deb/ubuntu/linux-xilinx-zynqmp-tools-5.4.0-1041?distro=focal < 5.4.0-1041.45
pkg:deb/ubuntu/linux-xilinx-zynqmp-headers-5.4.0-1041?distro=focal < 5.4.0-1041.45
pkg:deb/ubuntu/linux-tools-xilinx-zynqmp?distro=focal < 5.4.0.1041.41
pkg:deb/ubuntu/linux-tools-5.4.0-1041-xilinx-zynqmp?distro=focal < 5.4.0-1041.45
pkg:deb/ubuntu/linux-modules-5.4.0-1041-xilinx-zynqmp?distro=focal < 5.4.0-1041.45
pkg:deb/ubuntu/linux-image-xilinx-zynqmp?distro=focal < 5.4.0.1041.41
pkg:deb/ubuntu/linux-image-5.4.0-1041-xilinx-zynqmp?distro=focal < 5.4.0-1041.45
pkg:deb/ubuntu/linux-headers-xilinx-zynqmp?distro=focal < 5.4.0.1041.41
pkg:deb/ubuntu/linux-headers-5.4.0-1041-xilinx-zynqmp?distro=focal < 5.4.0-1041.45
pkg:deb/ubuntu/linux-buildinfo-5.4.0-1041-xilinx-zynqmp?distro=focal < 5.4.0-1041.45
ID
USN-6726-3
Severity
high
Severity from
CVE-2023-52436
URL
https://ubuntu.com/security/notices/USN-6726-3
Published
2024-04-17T13:06:30
(4 months ago)
Modified
2024-04-17T13:06:30
(4 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/linux-xilinx-zynqmp?distro=focal ubuntu linux-xilinx-zynqmp < 5.4.0.1041.41 focal
Affected pkg:deb/ubuntu/linux-xilinx-zynqmp-tools-5.4.0-1041?distro=focal ubuntu linux-xilinx-zynqmp-tools-5.4.0-1041 < 5.4.0-1041.45 focal
Affected pkg:deb/ubuntu/linux-xilinx-zynqmp-headers-5.4.0-1041?distro=focal ubuntu linux-xilinx-zynqmp-headers-5.4.0-1041 < 5.4.0-1041.45 focal
Affected pkg:deb/ubuntu/linux-tools-xilinx-zynqmp?distro=focal ubuntu linux-tools-xilinx-zynqmp < 5.4.0.1041.41 focal
Affected pkg:deb/ubuntu/linux-tools-5.4.0-1041-xilinx-zynqmp?distro=focal ubuntu linux-tools-5.4.0-1041-xilinx-zynqmp < 5.4.0-1041.45 focal
Affected pkg:deb/ubuntu/linux-modules-5.4.0-1041-xilinx-zynqmp?distro=focal ubuntu linux-modules-5.4.0-1041-xilinx-zynqmp < 5.4.0-1041.45 focal
Affected pkg:deb/ubuntu/linux-image-xilinx-zynqmp?distro=focal ubuntu linux-image-xilinx-zynqmp < 5.4.0.1041.41 focal
Affected pkg:deb/ubuntu/linux-image-5.4.0-1041-xilinx-zynqmp?distro=focal ubuntu linux-image-5.4.0-1041-xilinx-zynqmp < 5.4.0-1041.45 focal
Affected pkg:deb/ubuntu/linux-headers-xilinx-zynqmp?distro=focal ubuntu linux-headers-xilinx-zynqmp < 5.4.0.1041.41 focal
Affected pkg:deb/ubuntu/linux-headers-5.4.0-1041-xilinx-zynqmp?distro=focal ubuntu linux-headers-5.4.0-1041-xilinx-zynqmp < 5.4.0-1041.45 focal
Affected pkg:deb/ubuntu/linux-buildinfo-5.4.0-1041-xilinx-zynqmp?distro=focal ubuntu linux-buildinfo-5.4.0-1041-xilinx-zynqmp < 5.4.0-1041.45 focal
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date