First published: Thu Aug 31 2023(Updated: )
Daniel Moghimi discovered that some Intel(R) Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. (CVE-2022-40982) Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information. (CVE-2023-20593) It was discovered that the universal 32bit network packet classifier implementation in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-3609) It was discovered that the Quick Fair Queueing network scheduler implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-3611) It was discovered that the network packet classifier with netfilter/firewall marks implementation in the Linux kernel did not properly handle reference counting, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-3776)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-5.4.0-1075-gkeop | <5.4.0-1075.79 | 5.4.0-1075.79 |
=20.04 | ||
All of | ||
ubuntu/linux-image-gkeop | <5.4.0.1075.73 | 5.4.0.1075.73 |
=20.04 | ||
All of | ||
ubuntu/linux-image-gkeop-5.4 | <5.4.0.1075.73 | 5.4.0.1075.73 |
=20.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
The vulnerability ID for this Linux kernel vulnerability is CVE-2022-40982.
Some Intel(R) Processors are affected by this vulnerability.
A local unprivileged user could use this vulnerability to obtain sensitive information.
Update to the version 5.4.0-1075.79 of the linux-image-5.4.0-1075-gkeop package.
Yes, you can find more information about this vulnerability on the Ubuntu Security website.