USN-6193-1: Linux kernel vulnerabilities
Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-35788, LP: #2023577) It was discovered that for some Intel processors the INVLPG instruction implementation did not properly flush global TLB entries when PCIDs are enabled. An attacker could use this to expose sensitive information (kernel memory) or possibly cause undesired behaviors. (LP: #2023220)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 6.2.0.1006.7 - Upgrade
Upgrade
ubuntu/linux-image-6.2.0-24-genericto a version that resolves this vulnerability.Fixed in 6.2.0-24.24 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 6.2.0.24.24 - Upgrade
Upgrade
ubuntu/linux-image-generic-64kto a version that resolves this vulnerability.Fixed in 6.2.0.24.24 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 6.2.0.24.24 - Upgrade
Upgrade
ubuntu/linux-image-6.2.0-1007-raspito a version that resolves this vulnerability.Fixed in 6.2.0-1007.9 - Upgrade
Upgrade
ubuntu/linux-image-6.2.0-24-generic-lpaeto a version that resolves this vulnerability.Fixed in 6.2.0-24.24 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 6.2.0.1007.10 - Upgrade
Upgrade
ubuntu/linux-image-6.2.0-24-generic-64kto a version that resolves this vulnerability.Fixed in 6.2.0-24.24 - Upgrade
Upgrade
ubuntu/linux-image-6.2.0-1007-lowlatency-64kto a version that resolves this vulnerability.Fixed in 6.2.0-1007.7 - Upgrade
Upgrade
ubuntu/linux-image-6.2.0-1007-kvmto a version that resolves this vulnerability.Fixed in 6.2.0-1007.7 - Upgrade
Upgrade
ubuntu/linux-image-6.2.0-1007-lowlatencyto a version that resolves this vulnerability.Fixed in 6.2.0-1007.7 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 6.2.0.1007.7 - Upgrade
Upgrade
ubuntu/linux-image-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 6.2.0.1007.10 - Upgrade
Upgrade
ubuntu/linux-image-6.2.0-1007-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 6.2.0-1007.9 - Upgrade
Upgrade
ubuntu/linux-image-6.2.0-1006-awsto a version that resolves this vulnerability.Fixed in 6.2.0-1006.6 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-64kto a version that resolves this vulnerability.Fixed in 6.2.0.1007.7 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 6.2.0.24.24 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 6.2.0.1007.7 - Upgrade
Upgrade
ubuntu/linux-image-nvidia-lowlatencyto a version that resolves this vulnerability.Fixed in 5.15.0.1028.28 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1037-gcpto a version that resolves this vulnerability.Fixed in 5.15.0-1037.45 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1033-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.15.0-1033.36 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1028-nvidia-lowlatencyto a version that resolves this vulnerability.Fixed in 5.15.0-1028.28 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-76-lowlatencyto a version that resolves this vulnerability.Fixed in 5.15.0-76.83 - Upgrade
Upgrade
ubuntu/linux-image-gkeopto a version that resolves this vulnerability.Fixed in 5.15.0.1023.22 - Upgrade
Upgrade
ubuntu/linux-image-generic-64kto a version that resolves this vulnerability.Fixed in 5.15.0.76.74 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1038-oracleto a version that resolves this vulnerability.Fixed in 5.15.0-1038.44 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-76-lowlatency-64kto a version that resolves this vulnerability.Fixed in 5.15.0-76.83 - Upgrade
Upgrade
ubuntu/linux-image-gke-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1037.36 - Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 5.15.0.1037.36 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-64kto a version that resolves this vulnerability.Fixed in 5.15.0.76.81 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1023-gkeopto a version that resolves this vulnerability.Fixed in 5.15.0-1023.28 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1033-raspito a version that resolves this vulnerability.Fixed in 5.15.0-1033.36 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1041-azureto a version that resolves this vulnerability.Fixed in 5.15.0-1041.48 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-76-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.15.0-76.83 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-76-generic-64kto a version that resolves this vulnerability.Fixed in 5.15.0-76.83 - Upgrade
Upgrade
ubuntu/linux-image-ibmto a version that resolves this vulnerability.Fixed in 5.15.0.1033.29 - Upgrade
Upgrade
ubuntu/linux-image-azure-lts-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.1041.37 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 5.15.0.76.74 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1028-nvidiato a version that resolves this vulnerability.Fixed in 5.15.0-1028.28 - Upgrade
Upgrade
ubuntu/linux-image-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.15.0.1033.30 - Upgrade
Upgrade
ubuntu/linux-image-aws-lts-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.1039.38 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1039-awsto a version that resolves this vulnerability.Fixed in 5.15.0-1039.44 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1037-gketo a version that resolves this vulnerability.Fixed in 5.15.0-1037.42 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1037-kvmto a version that resolves this vulnerability.Fixed in 5.15.0-1037.42 - Upgrade
Upgrade
ubuntu/linux-image-gkeop-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1023.22 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1033-ibmto a version that resolves this vulnerability.Fixed in 5.15.0-1033.36 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 5.15.0.1038.33 - Upgrade
Upgrade
ubuntu/linux-image-nvidiato a version that resolves this vulnerability.Fixed in 5.15.0.1028.28 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.15.0.1041.37 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 5.15.0.76.74 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 5.15.0.1033.30 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-76-genericto a version that resolves this vulnerability.Fixed in 5.15.0-76.83 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 5.15.0.1037.33 - Upgrade
Upgrade
ubuntu/linux-image-gcp-lts-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.1037.33 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.15.0.76.74 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 5.15.0.76.81 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1037-gcpto a version that resolves this vulnerability.Fixed in 5.15.0-1037.45~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-gkeopto a version that resolves this vulnerability.Fixed in 5.4.0.1072.70 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 5.4.0.153.150 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.15.0.1039.44~20.04.28 - Upgrade
Upgrade
ubuntu/linux-image-raspi-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.4.0.1089.119 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1023-gkeopto a version that resolves this vulnerability.Fixed in 5.15.0-1023.28~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-76-lowlatencyto a version that resolves this vulnerability.Fixed in 5.15.0-76.83~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1041-azureto a version that resolves this vulnerability.Fixed in 5.15.0-1041.48~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-ibm-lts-20.04to a version that resolves this vulnerability.Fixed in 5.4.0.1052.78 - Upgrade
Upgrade
ubuntu/linux-image-gkeop-5.4to a version that resolves this vulnerability.Fixed in 5.4.0.1072.70 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.15.0.1041.48~20.04.31 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1052-ibmto a version that resolves this vulnerability.Fixed in 5.4.0-1052.57 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-64k-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.76.83~20.04.34 - Upgrade
Upgrade
ubuntu/linux-image-oracle-lts-20.04to a version that resolves this vulnerability.Fixed in 5.4.0.1104.97 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1108-gcpto a version that resolves this vulnerability.Fixed in 5.4.0-1108.117 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 5.4.0.1094.89 - Upgrade
Upgrade
ubuntu/linux-image-oemto a version that resolves this vulnerability.Fixed in 5.4.0.153.150 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1111-azureto a version that resolves this vulnerability.Fixed in 5.4.0-1111.117 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 5.4.0.153.150 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-76-lowlatency-64kto a version that resolves this vulnerability.Fixed in 5.15.0-76.83~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-gke-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1037.42~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-oem-osp1to a version that resolves this vulnerability.Fixed in 5.4.0.153.150 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1104-oracleto a version that resolves this vulnerability.Fixed in 5.4.0-1104.113 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04cto a version that resolves this vulnerability.Fixed in 5.15.0.76.83~20.04.37 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04bto a version that resolves this vulnerability.Fixed in 5.15.0.76.83~20.04.37 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04dto a version that resolves this vulnerability.Fixed in 5.15.0.76.83~20.04.37 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1039-awsto a version that resolves this vulnerability.Fixed in 5.15.0-1039.44~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-ibmto a version that resolves this vulnerability.Fixed in 5.4.0.1052.78 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 5.15.0.1037.45~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1105-awsto a version that resolves this vulnerability.Fixed in 5.4.0-1105.113 - Upgrade
Upgrade
ubuntu/linux-image-gkeop-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1023.28~20.04.19 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-76-genericto a version that resolves this vulnerability.Fixed in 5.15.0-76.83~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-76-generic-64kto a version that resolves this vulnerability.Fixed in 5.15.0-76.83~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.4.0.153.150 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1038-oracleto a version that resolves this vulnerability.Fixed in 5.15.0-1038.44~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1072-gkeopto a version that resolves this vulnerability.Fixed in 5.4.0-1072.76 - Upgrade
Upgrade
ubuntu/linux-image-raspi2-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.4.0.1089.119 - Upgrade
Upgrade
ubuntu/linux-image-bluefieldto a version that resolves this vulnerability.Fixed in 5.4.0.1066.61 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-153-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.4.0-153.170 - Upgrade
Upgrade
ubuntu/linux-image-azure-lts-20.04to a version that resolves this vulnerability.Fixed in 5.4.0.1111.104 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1089-raspito a version that resolves this vulnerability.Fixed in 5.4.0-1089.100 - Upgrade
Upgrade
ubuntu/linux-image-azure-fdeto a version that resolves this vulnerability.Fixed in 5.15.0.1041.48~20.04.1.20 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1037-gketo a version that resolves this vulnerability.Fixed in 5.15.0-1037.42~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-gcp-lts-20.04to a version that resolves this vulnerability.Fixed in 5.4.0.1108.110 - Upgrade
Upgrade
ubuntu/linux-image-aws-lts-20.04to a version that resolves this vulnerability.Fixed in 5.4.0.1105.102 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-153-lowlatencyto a version that resolves this vulnerability.Fixed in 5.4.0-153.170 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 5.15.0.1038.44~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.76.83~20.04.37 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 5.4.0.1089.119 - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.76.83~20.04.37 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1066-bluefieldto a version that resolves this vulnerability.Fixed in 5.4.0-1066.72 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 5.4.0.153.150 - Upgrade
Upgrade
ubuntu/linux-image-azure-cvmto a version that resolves this vulnerability.Fixed in 5.15.0.1041.48~20.04.31 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.76.83~20.04.34 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-76-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.15.0-76.83~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.76.83~20.04.37 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.76.83~20.04.37 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-153-genericto a version that resolves this vulnerability.Fixed in 5.4.0-153.170 - Upgrade
Upgrade
ubuntu/linux-image-raspi2to a version that resolves this vulnerability.Fixed in 5.4.0.1089.119 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1094-kvmto a version that resolves this vulnerability.Fixed in 5.4.0-1094.100 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1041-azure-fdeto a version that resolves this vulnerability.Fixed in 5.15.0-1041.48~20.04.1.1 - Upgrade
Upgrade
ubuntu/linux-image-generic-64k-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.76.83~20.04.37 - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.4.0.153.170~18.04.124 - Upgrade
Upgrade
ubuntu/linux-image-snapdragon-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.4.0.153.170~18.04.124 - Upgrade
Upgrade
ubuntu/linux-image-oemto a version that resolves this vulnerability.Fixed in 5.4.0.153.170~18.04.124 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.4.0.1105.83 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1104-oracleto a version that resolves this vulnerability.Fixed in 5.4.0-1104.113~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-raspi-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.4.0.1089.86 - Upgrade
Upgrade
ubuntu/linux-image-ibmto a version that resolves this vulnerability.Fixed in 5.4.0.1052.63 - Upgrade
Upgrade
ubuntu/linux-image-oem-osp1to a version that resolves this vulnerability.Fixed in 5.4.0.153.170~18.04.124 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-153-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.4.0-153.170~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.4.0.153.170~18.04.124 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1089-raspito a version that resolves this vulnerability.Fixed in 5.4.0-1089.100~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.4.0.1111.84 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-153-genericto a version that resolves this vulnerability.Fixed in 5.4.0-153.170~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.4.0.153.170~18.04.124 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1052-ibmto a version that resolves this vulnerability.Fixed in 5.4.0-1052.57~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 5.4.0.1108.84 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-153-lowlatencyto a version that resolves this vulnerability.Fixed in 5.4.0-153.170~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1105-awsto a version that resolves this vulnerability.Fixed in 5.4.0-1105.113~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 5.4.0.1104.113~18.04.76 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1108-gcpto a version that resolves this vulnerability.Fixed in 5.4.0-1108.117~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.4.0.153.170~18.04.124 - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1111-azureto a version that resolves this vulnerability.Fixed in 5.4.0-1111.117~18.04.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-6193-1
Event History
Frequently Asked Questions
What is the severity of USN-6193-1?
The severity of USN-6193-1 is considered high as it involves an out-of-bounds write vulnerability that could lead to system crash or arbitrary code execution.
How do I fix USN-6193-1?
To fix USN-6193-1, you should upgrade to the latest Linux kernel version specified in the advisory, typically the patched version listed for your Ubuntu release.
What are the potential impacts of USN-6193-1?
The potential impacts of USN-6193-1 include denial of service due to system crashes or, in severe cases, malicious code execution.
Which Ubuntu versions are affected by USN-6193-1?
USN-6193-1 affects Ubuntu 23.04 and its associated Linux kernel packages.
How can I identify if my system is vulnerable to USN-6193-1?
You can identify if your system is vulnerable to USN-6193-1 by checking if you are running an affected version of the Linux kernel listed in the advisory.