USN-6127-1: Linux kernel vulnerabilities
Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-32233) Gwangun Jung discovered that the Quick Fair Queueing scheduler implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-31436) Reima Ishii discovered that the nested KVM implementation for Intel x86 processors in the Linux kernel did not properly validate control registers in certain situations. An attacker in a guest VM could use this to cause a denial of service (guest crash). (CVE-2023-30456) It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did not properly perform data buffer size validation in some situations. A physically proximate attacker could use this to craft a malicious USB device that when inserted, could cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-1380) Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock). (CVE-2023-2612)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 5.19.0.43.39 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-1019-raspito a version that resolves this vulnerability.Fixed in 5.19.0-1019.26 - Upgrade
Upgrade
ubuntu/linux-image-generic-64kto a version that resolves this vulnerability.Fixed in 5.19.0.43.39 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 5.19.0.43.39 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.19.0.1026.23 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-1025-lowlatencyto a version that resolves this vulnerability.Fixed in 5.19.0-1025.26 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-1025-lowlatency-64kto a version that resolves this vulnerability.Fixed in 5.19.0-1025.26 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 5.19.0.1019.18 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-1023-ibmto a version that resolves this vulnerability.Fixed in 5.19.0-1023.25 - Upgrade
Upgrade
ubuntu/linux-image-ibmto a version that resolves this vulnerability.Fixed in 5.19.0.1023.20 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-64kto a version that resolves this vulnerability.Fixed in 5.19.0.1025.21 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-1027-azureto a version that resolves this vulnerability.Fixed in 5.19.0-1027.30 - Upgrade
Upgrade
ubuntu/linux-image-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.19.0.1019.18 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-43-genericto a version that resolves this vulnerability.Fixed in 5.19.0-43.44 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-1025-gcpto a version that resolves this vulnerability.Fixed in 5.19.0-1025.27 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.19.0.1027.22 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-1024-oracleto a version that resolves this vulnerability.Fixed in 5.19.0-1024.27 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 5.19.0.1024.21 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-43-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.19.0-43.44 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 5.19.0.1025.21 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.19.0.43.39 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-43-generic-64kto a version that resolves this vulnerability.Fixed in 5.19.0-43.44 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-1019-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.19.0-1019.26 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 5.19.0.1024.20 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-1024-kvmto a version that resolves this vulnerability.Fixed in 5.19.0-1024.25 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-1026-awsto a version that resolves this vulnerability.Fixed in 5.19.0-1026.27 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 5.19.0.1025.21 - Upgrade
Upgrade
ubuntu/linux-image-gkeopto a version that resolves this vulnerability.Fixed in 5.15.0.1021.20 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 5.15.0.73.71 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-73-genericto a version that resolves this vulnerability.Fixed in 5.15.0-73.80 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-43-genericto a version that resolves this vulnerability.Fixed in 5.19.0-43.44~22.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1031-ibmto a version that resolves this vulnerability.Fixed in 5.15.0-1031.34 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.15.0.1039.35 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-43-generic-64kto a version that resolves this vulnerability.Fixed in 5.19.0-43.44~22.04.1 - Upgrade
Upgrade
ubuntu/linux-image-generic-64k-hwe-22.04to a version that resolves this vulnerability.Fixed in 5.19.0.43.44~22.04.17 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 5.15.0.1034.30 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 5.15.0.73.78 - Upgrade
Upgrade
ubuntu/linux-image-generic-64kto a version that resolves this vulnerability.Fixed in 5.15.0.73.71 - Upgrade
Upgrade
ubuntu/linux-image-gke-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1034.33 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1021-gkeopto a version that resolves this vulnerability.Fixed in 5.15.0-1021.26 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-73-lowlatencyto a version that resolves this vulnerability.Fixed in 5.15.0-73.80 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1034-kvmto a version that resolves this vulnerability.Fixed in 5.15.0-1034.39 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1036-oracleto a version that resolves this vulnerability.Fixed in 5.15.0-1036.42 - Upgrade
Upgrade
ubuntu/linux-image-gkeop-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1021.20 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1039-azureto a version that resolves this vulnerability.Fixed in 5.15.0-1039.46 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-hwe-22.04to a version that resolves this vulnerability.Fixed in 5.19.0.43.44~22.04.17 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-73-lowlatency-64kto a version that resolves this vulnerability.Fixed in 5.15.0-73.80 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.15.0.73.71 - Upgrade
Upgrade
ubuntu/linux-image-ibmto a version that resolves this vulnerability.Fixed in 5.15.0.1031.27 - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-22.04to a version that resolves this vulnerability.Fixed in 5.19.0.43.44~22.04.17 - Upgrade
Upgrade
ubuntu/linux-image-azure-lts-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.1039.35 - Upgrade
Upgrade
ubuntu/linux-image-aws-lts-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.1037.36 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-73-generic-64kto a version that resolves this vulnerability.Fixed in 5.15.0-73.80 - Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 5.15.0.1034.33 - Upgrade
Upgrade
ubuntu/linux-image-gcp-lts-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.1035.31 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 5.15.0.1036.31 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1034-gketo a version that resolves this vulnerability.Fixed in 5.15.0-1034.39 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 5.15.0.73.71 - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-22.04to a version that resolves this vulnerability.Fixed in 5.19.0.43.44~22.04.17 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1037-awsto a version that resolves this vulnerability.Fixed in 5.15.0-1037.41 - Upgrade
Upgrade
ubuntu/linux-image-5.19.0-43-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.19.0-43.44~22.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1035-gcpto a version that resolves this vulnerability.Fixed in 5.15.0-1035.43 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-64kto a version that resolves this vulnerability.Fixed in 5.15.0.73.78 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-73-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.15.0-73.80 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1039-azureto a version that resolves this vulnerability.Fixed in 5.15.0-1039.46~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1034-gketo a version that resolves this vulnerability.Fixed in 5.15.0-1034.39~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.73.80~20.04.34 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.15.0.1037.41~20.04.26 - Upgrade
Upgrade
ubuntu/linux-image-azure-cvmto a version that resolves this vulnerability.Fixed in 5.15.0.1039.46~20.04.29 - Upgrade
Upgrade
ubuntu/linux-image-gke-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1034.39~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.73.80~20.04.31 - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.73.80~20.04.34 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-73-genericto a version that resolves this vulnerability.Fixed in 5.15.0-73.80~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-73-lowlatencyto a version that resolves this vulnerability.Fixed in 5.15.0-73.80~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04cto a version that resolves this vulnerability.Fixed in 5.15.0.73.80~20.04.34 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04bto a version that resolves this vulnerability.Fixed in 5.15.0.73.80~20.04.34 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04dto a version that resolves this vulnerability.Fixed in 5.15.0.73.80~20.04.34 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.15.0.1039.46~20.04.29 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1037-awsto a version that resolves this vulnerability.Fixed in 5.15.0-1037.41~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.73.80~20.04.34 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-73-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.15.0-73.80~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-73-generic-64kto a version that resolves this vulnerability.Fixed in 5.15.0-73.80~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1036-oracleto a version that resolves this vulnerability.Fixed in 5.15.0-1036.42~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 5.15.0.1035.43~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-73-lowlatency-64kto a version that resolves this vulnerability.Fixed in 5.15.0-73.80~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1035-gcpto a version that resolves this vulnerability.Fixed in 5.15.0-1035.43~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-generic-64k-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.73.80~20.04.34 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 5.15.0.1036.42~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.73.80~20.04.34 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-64k-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.73.80~20.04.31
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6127-1?
USN-6127-1 is classified as a high severity due to its potential to cause denial of service or system crashes.
How do I fix USN-6127-1?
To fix USN-6127-1, update to the latest kernels or packages specified in the Ubuntu advisory.
Who is affected by USN-6127-1?
USN-6127-1 affects local users running affected versions of the Linux kernel on Ubuntu 22.10.
Can USN-6127-1 be exploited remotely?
No, USN-6127-1 can only be exploited by local attackers with access to the affected system.
What should I do if I cannot update for USN-6127-1 immediately?
If unable to update immediately, ensure that critical services are protected and monitor for any suspicious activities on your system.