USN-6384-1: Linux kernel (OEM) vulnerabilities

Published Sep 19, 2023

Updated

Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii Oleksenko discovered that some AMD processors could leak stale data from division operations in certain situations. A local attacker could possibly use this to expose sensitive information. (CVE-2023-20588) Lonial Con discovered that the netfilter subsystem in the Linux kernel contained a memory leak when handling certain element flush operations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2023-4569)

Affected Software

1 affected component

Ubuntu Linux kernel (OEM)

Event History

May 10, 2025

Advisory Published

via Ubuntu·04:03 AM

Data Sourced

via Ubuntu·04:03 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2023-20588?

The severity of CVE-2023-20588 is high.

How can a local attacker exploit CVE-2023-20588?

A local attacker could exploit CVE-2023-20588 to leak stale data from division operations and expose sensitive information.

Which versions of Ubuntu are affected by CVE-2023-20588?

Ubuntu versions 22.04 are affected by CVE-2023-20588.

How can I fix CVE-2023-20588 in Ubuntu?

Update your Ubuntu system to version 6.1.0-1022.22+1 or later to fix CVE-2023-20588.

Where can I find more information about CVE-2023-20588?

You can find more information about CVE-2023-20588 on the Ubuntu Security Notices website: <a href='https://ubuntu.com/security/CVE-2023-20588'>https://ubuntu.com/security/CVE-2023-20588</a>