First published: Thu Jun 08 2023(Updated: )
Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-32233) Gwangun Jung discovered that the Quick Fair Queueing scheduler implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-31436) Reima Ishii discovered that the nested KVM implementation for Intel x86 processors in the Linux kernel did not properly validate control registers in certain situations. An attacker in a guest VM could use this to cause a denial of service (guest crash). (CVE-2023-30456) It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did not properly perform data buffer size validation in some situations. A physically proximate attacker could use this to craft a malicious USB device that when inserted, could cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-1380) Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock). (CVE-2023-2612)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-5.15.0-1030-raspi | <5.15.0-1030.32 | 5.15.0-1030.32 |
=22.04 | ||
All of | ||
ubuntu/linux-image-intel-iotg | <5.15.0.1031.30 | 5.15.0.1031.30 |
=22.04 | ||
All of | ||
ubuntu/linux-image-raspi-nolpae | <5.15.0.1030.27 | 5.15.0.1030.27 |
=22.04 | ||
All of | ||
ubuntu/linux-image-raspi | <5.15.0.1030.27 | 5.15.0.1030.27 |
=22.04 | ||
All of | ||
ubuntu/linux-image-5.15.0-1031-intel-iotg | <5.15.0-1031.36 | 5.15.0-1031.36 |
=22.04 | ||
All of | ||
ubuntu/linux-image-5.15.0-1030-raspi-nolpae | <5.15.0-1030.32 | 5.15.0-1030.32 |
=22.04 | ||
All of | ||
ubuntu/linux-image-5.4.0-1086-raspi | <5.4.0-1086.97 | 5.4.0-1086.97 |
=20.04 | ||
All of | ||
ubuntu/linux-image-raspi | <5.4.0.1086.116 | 5.4.0.1086.116 |
=20.04 | ||
All of | ||
ubuntu/linux-image-raspi2 | <5.4.0.1086.116 | 5.4.0.1086.116 |
=20.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
The severity of USN-6150-1 is important.
A race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability.
A local attacker could use this vulnerability to cause a denial of service (system crash) or possibly execute arbitrary code.
Ubuntu Ubuntu 22.04, Linux kernel versions 5.15.0-1030.32, 5.15.0.1031.30, 5.15.0.1030.27, 5.15.0.1030.27, 5.15.0-1031.36, 5.15.0-1030.32, 5.4.0-1086.97, 5.4.0.1086.116, 5.4.0.1086.116.
Update your Ubuntu Ubuntu 22.04 system to Linux kernel versions 5.15.0-1030.32, 5.15.0.1031.30, 5.15.0.1030.27, 5.15.0-1030.32, 5.15.0-1031.36, 5.15.0-1030.32, 5.4.0-1086.97, 5.4.0.1086.116, or 5.4.0.1086.116.