USN-6284-1: Linux kernel vulnerabilities
First published: Fri Aug 11 2023(Updated: )
It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service (infinite recursion). (CVE-2020-36691) Billy Jheng Bing Jhong discovered that the CIFS network file system implementation in the Linux kernel did not properly validate arguments to ioctl() in some situations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-0168) It was discovered that the ext4 file system implementation in the Linux kernel contained a use-after-free vulnerability. An attacker could use this to construct a malicious ext4 file system image that, when mounted, could cause a denial of service (system crash). (CVE-2022-1184) It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. (CVE-2022-27672) William Zhao discovered that the Traffic Control (TC) subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service (kernel deadlock). (CVE-2022-4269) It was discovered that a race condition existed in the qdisc implementation in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-0590) It was discovered that a race condition existed in the btrfs file system implementation in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-1611) It was discovered that the APM X-Gene SoC hardware monitoring driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information (kernel memory). (CVE-2023-1855) It was discovered that the ST NCI NFC driver did not properly handle device removal events. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2023-1990) It was discovered that the XFS file system implementation in the Linux kernel did not properly perform metadata validation when mounting certain images. An attacker could use this to specially craft a file system image that, when mounted, could cause a denial of service (system crash). (CVE-2023-2124) It was discovered that the SLIMpro I2C device driver in the Linux kernel did not properly validate user-supplied data in some situations, leading to an out-of-bounds write vulnerability. A privileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-2194) It was discovered that a race condition existed in the TLS subsystem in the Linux kernel, leading to a use-after-free or a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-28466) It was discovered that the DA9150 charger driver in the Linux kernel did not properly handle device removal, leading to a user-after free vulnerability. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-30772) It was discovered that the btrfs file system implementation in the Linux kernel did not properly handle error conditions in some situations, leading to a use-after-free vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-3111) It was discovered that the Ricoh R5C592 MemoryStick card reader driver in the Linux kernel contained a race condition during module unload, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-3141) It was discovered that the Qualcomm EMAC ethernet driver in the Linux kernel did not properly handle device removal, leading to a user-after free vulnerability. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-33203)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-5.4.0-1019-iot | <5.4.0-1019.20 | 5.4.0-1019.20 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1074-gkeop | <5.4.0-1074.78 | 5.4.0-1074.78 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1091-raspi | <5.4.0-1091.102 | 5.4.0-1091.102 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1096-kvm | <5.4.0-1096.102 | 5.4.0-1096.102 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1106-oracle | <5.4.0-1106.115 | 5.4.0-1106.115 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1107-aws | <5.4.0-1107.115 | 5.4.0-1107.115 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1110-gcp | <5.4.0-1110.119 | 5.4.0-1110.119 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-156-generic | <5.4.0-156.173 | 5.4.0-156.173 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-156-generic-lpae | <5.4.0-156.173 | 5.4.0-156.173 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-156-lowlatency | <5.4.0-156.173 | 5.4.0-156.173 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-aws-lts-20.04 | <5.4.0.1107.104 | 5.4.0.1107.104 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-gcp-lts-20.04 | <5.4.0.1110.112 | 5.4.0.1110.112 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-generic | <5.4.0.156.152 | 5.4.0.156.152 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae | <5.4.0.156.152 | 5.4.0.156.152 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-gkeop | <5.4.0.1074.72 | 5.4.0.1074.72 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-gkeop-5.4 | <5.4.0.1074.72 | 5.4.0.1074.72 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-kvm | <5.4.0.1096.91 | 5.4.0.1096.91 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency | <5.4.0.156.152 | 5.4.0.156.152 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-oem | <5.4.0.156.152 | 5.4.0.156.152 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-oem-osp1 | <5.4.0.156.152 | 5.4.0.156.152 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-oracle-lts-20.04 | <5.4.0.1106.99 | 5.4.0.1106.99 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-raspi | <5.4.0.1091.121 | 5.4.0.1091.121 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-raspi2 | <5.4.0.1091.121 | 5.4.0.1091.121 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-virtual | <5.4.0.156.152 | 5.4.0.156.152 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1091-raspi | <5.4.0-1091.102~18.04.1 | 5.4.0-1091.102~18.04.1 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1106-oracle | <5.4.0-1106.115~18.04.1 | 5.4.0-1106.115~18.04.1 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1107-aws | <5.4.0-1107.115~18.04.1 | 5.4.0-1107.115~18.04.1 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1110-gcp | <5.4.0-1110.119~18.04.1 | 5.4.0-1110.119~18.04.1 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-aws | <5.4.0.1107.85 | 5.4.0.1107.85 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-gcp | <5.4.0.1110.86 | 5.4.0.1110.86 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-oracle | <5.4.0.1106.115~18.04.78 | 5.4.0.1106.115~18.04.78 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-raspi-hwe-18.04 | <5.4.0.1091.88 | 5.4.0.1091.88 |
| =18.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2023-1990
- https://ubuntu.com/security/CVE-2023-28466
- https://ubuntu.com/security/CVE-2023-3111
- https://ubuntu.com/security/CVE-2023-33203
- https://ubuntu.com/security/CVE-2023-1855
- https://ubuntu.com/security/CVE-2023-2124
- https://ubuntu.com/security/CVE-2023-0590
- https://ubuntu.com/security/CVE-2023-2194
- https://ubuntu.com/security/CVE-2022-27672
- https://ubuntu.com/security/CVE-2022-1184
- https://ubuntu.com/security/CVE-2022-0168
- https://ubuntu.com/security/CVE-2023-3141
- https://ubuntu.com/security/CVE-2022-4269
- https://ubuntu.com/security/CVE-2023-1611
- https://ubuntu.com/security/CVE-2020-36691
- https://ubuntu.com/security/CVE-2023-30772
- https://ubuntu.com/security/notices/USN-6033-1
- https://ubuntu.com/security/notices/USN-6175-1
- https://ubuntu.com/security/notices/USN-6186-1
- https://ubuntu.com/security/notices/USN-6221-1
- https://ubuntu.com/security/notices/USN-6252-1
- https://ubuntu.com/security/notices/USN-6300-1
- https://ubuntu.com/security/notices/USN-6301-1
- https://ubuntu.com/security/notices/USN-6311-1
- https://ubuntu.com/security/notices/USN-6312-1
- https://ubuntu.com/security/notices/USN-6314-1
- https://ubuntu.com/security/notices/USN-6331-1
- https://ubuntu.com/security/notices/USN-6332-1
- https://ubuntu.com/security/notices/USN-6337-1
- https://ubuntu.com/security/notices/USN-6347-1
- https://ubuntu.com/security/notices/USN-6385-1
- https://ubuntu.com/security/notices/USN-6206-1
- https://ubuntu.com/security/notices/USN-6224-1
- https://ubuntu.com/security/notices/USN-6228-1
- https://ubuntu.com/security/notices/USN-6231-1
- https://ubuntu.com/security/notices/USN-6235-1
- https://ubuntu.com/security/notices/USN-6254-1
- https://ubuntu.com/security/notices/USN-5850-1
- https://ubuntu.com/security/notices/USN-5851-1
- https://ubuntu.com/security/notices/USN-5860-1
- https://ubuntu.com/security/notices/USN-5876-1
- https://ubuntu.com/security/notices/USN-5877-1
- https://ubuntu.com/security/notices/USN-5878-1
- https://ubuntu.com/security/notices/USN-5879-1
- https://ubuntu.com/security/notices/USN-5978-1
- https://ubuntu.com/security/notices/USN-6079-1
- https://ubuntu.com/security/notices/USN-6080-1
- https://ubuntu.com/security/notices/USN-6085-1
- https://ubuntu.com/security/notices/USN-6090-1
- https://ubuntu.com/security/notices/USN-6091-1
- https://ubuntu.com/security/notices/USN-6096-1
- https://ubuntu.com/security/notices/USN-6133-1
- https://ubuntu.com/security/notices/USN-6134-1
- https://ubuntu.com/security/notices/USN-6396-1
- https://ubuntu.com/security/notices/USN-6396-2
- https://ubuntu.com/security/notices/USN-6396-3
- https://ubuntu.com/security/notices/USN-5469-1
- https://ubuntu.com/security/notices/USN-6260-1
- https://ubuntu.com/security/notices/USN-6283-1
- https://ubuntu.com/security/notices/USN-6171-1
- https://ubuntu.com/security/notices/USN-6187-1
- https://launchpad.net/ubuntu/+source/linux-signed-iot/5.4.0-1019.20
- https://launchpad.net/ubuntu/+source/linux-signed-gkeop/5.4.0-1074.78
- https://launchpad.net/ubuntu/+source/linux-raspi/5.4.0-1091.102
- https://launchpad.net/ubuntu/+source/linux-signed-kvm/5.4.0-1096.102
- https://launchpad.net/ubuntu/+source/linux-signed-oracle/5.4.0-1106.115
- https://launchpad.net/ubuntu/+source/linux-signed-aws/5.4.0-1107.115
- https://launchpad.net/ubuntu/+source/linux-signed-gcp/5.4.0-1110.119
- https://launchpad.net/ubuntu/+source/linux-signed/5.4.0-156.173
- https://launchpad.net/ubuntu/+source/linux/5.4.0-156.173
- https://launchpad.net/ubuntu/+source/linux-meta-aws/5.4.0.1107.104
- https://launchpad.net/ubuntu/+source/linux-meta-gcp/5.4.0.1110.112
- https://launchpad.net/ubuntu/+source/linux-meta/5.4.0.156.152
- https://launchpad.net/ubuntu/+source/linux-meta-gkeop/5.4.0.1074.72
- https://launchpad.net/ubuntu/+source/linux-meta-kvm/5.4.0.1096.91
- https://launchpad.net/ubuntu/+source/linux-meta-oracle/5.4.0.1106.99
- https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.4.0.1091.121
- https://ubuntu.com/security/notices/USN-6284-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- collector/usn
- source/Ubuntu
- anchor-related/USN-6033-1
- anchor-related/USN-6175-1
- anchor-related/USN-6186-1
- anchor-related/USN-6221-1
- anchor-related/USN-6252-1
- anchor-related/USN-6300-1
- anchor-related/USN-6301-1
- anchor-related/USN-6311-1
- anchor-related/USN-6312-1
- anchor-related/USN-6314-1
- anchor-related/USN-6331-1
- anchor-related/USN-6332-1
- anchor-related/USN-6337-1
- anchor-related/USN-6347-1
- anchor-related/USN-6385-1
- anchor-related/USN-6206-1
- anchor-related/USN-6224-1
- anchor-related/USN-6228-1
- anchor-related/USN-6231-1
- anchor-related/USN-6235-1
- anchor-related/USN-6254-1
- anchor-related/USN-5850-1
- anchor-related/USN-5851-1
- anchor-related/USN-5860-1
- anchor-related/USN-5876-1
- anchor-related/USN-5877-1
- anchor-related/USN-5878-1
- anchor-related/USN-5879-1
- anchor-related/USN-5978-1
- anchor-related/USN-6079-1
- anchor-related/USN-6080-1
- anchor-related/USN-6085-1
- anchor-related/USN-6090-1
- anchor-related/USN-6091-1
- anchor-related/USN-6096-1
- anchor-related/USN-6133-1
- anchor-related/USN-6134-1
- anchor-related/USN-6396-1
- anchor-related/USN-6396-2
- anchor-related/USN-6396-3
- anchor-related/USN-5469-1
- anchor-related/USN-6260-1
- anchor-related/USN-6283-1
- anchor-related/USN-6171-1
- anchor-related/USN-6187-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/20.04
- version/ubuntu ubuntu/18.04