USN-5783-1: Linux kernel (OEM) vulnerability
Tamás Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability addressed by USN-5783-1?
The vulnerability addressed by USN-5783-1 is a use-after-free vulnerability in the Bluetooth L2CAP handshake implementation in the Linux kernel.
How does the use-after-free vulnerability in the Bluetooth L2CAP handshake implementation impact Linux kernel?
The use-after-free vulnerability in the Bluetooth L2CAP handshake implementation could allow a physically proximate attacker to cause a denial of service (system crash) or possibly execute arbitrary code.
What software versions are affected by the vulnerability?
The Linux kernel versions affected by the vulnerability include linux-image-oem-22.04 (version up to 5.17.0.1025.23) and linux-image-5.17.0-1025-oem (version up to 5.17.0-1025.26) on Ubuntu 22.04.
How can I fix the vulnerability in the Linux kernel?
To fix the vulnerability in the Linux kernel, you should update to version 5.17.0.1025.23 or later for linux-image-oem-22.04 and version 5.17.0-1025.26 or later for linux-image-5.17.0-1025-oem.
Where can I find more information about the vulnerability?
You can find more information about the vulnerability in USN-5783-1 on the Ubuntu Security Notices website.