USN-6056-1: Linux kernel (OEM) vulnerability

Published May 5, 2023

Updated

It was discovered that a race condition existed in the Xen transport layer implementation for the 9P file system protocol in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (guest crash) or expose sensitive information (guest kernel memory).

Affected Software

1 affected component

Canonical Linux kernel (OEM)

Event History

May 10, 2025

Advisory Published

via Ubuntu·03:57 AM

Data Sourced

via Ubuntu·03:57 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-1859

Frequently Asked Questions

What is the vulnerability ID for this Linux kernel vulnerability?

The vulnerability ID for this Linux kernel vulnerability is CVE-2023-1859.

What is the severity of the Linux kernel (OEM) vulnerability?

The severity of the Linux kernel (OEM) vulnerability is not specified in the information provided.

How can a local attacker exploit this vulnerability?

A local attacker can exploit this vulnerability by causing a denial of service (guest crash) or exposing sensitive information (guest).

What is the affected version of the Linux kernel (OEM)?

The affected version of the Linux kernel (OEM) is 6.1.0.1010.10.

How can I fix the Linux kernel (OEM) vulnerability?

To fix the Linux kernel (OEM) vulnerability, update to version 6.1.0.1010.10 or later.