USN-6495-1: Linux kernel vulnerabilities
First published: Tue Nov 21 2023(Updated: )
Yu Hao discovered that the UBI driver in the Linux kernel did not properly check for MTD with zero erasesize during device attachment. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2023-31085) Manfred Rudigier discovered that the Intel(R) PCI-Express Gigabit (igb) Ethernet driver in the Linux kernel did not properly validate received frames that are larger than the set MTU size, leading to a buffer overflow vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-45871)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-5.4.0-1026-iot | <5.4.0-1026.27 | 5.4.0-1026.27 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-1034-xilinx-zynqmp | <5.4.0-1034.38 | 5.4.0-1034.38 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-1061-ibm | <5.4.0-1061.66 | 5.4.0-1061.66 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-1075-bluefield | <5.4.0-1075.81 | 5.4.0-1075.81 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-1098-raspi | <5.4.0-1098.110 | 5.4.0-1098.110 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-1103-kvm | <5.4.0-1103.110 | 5.4.0-1103.110 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-1113-oracle | <5.4.0-1113.122 | 5.4.0-1113.122 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-1114-aws | <5.4.0-1114.124 | 5.4.0-1114.124 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-167-generic | <5.4.0-167.184 | 5.4.0-167.184 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-167-generic-lpae | <5.4.0-167.184 | 5.4.0-167.184 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-167-lowlatency | <5.4.0-167.184 | 5.4.0-167.184 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-aws-lts-20.04 | <5.4.0.1114.111 | 5.4.0.1114.111 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-bluefield | <5.4.0.1075.70 | 5.4.0.1075.70 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-generic | <5.4.0.167.164 | 5.4.0.167.164 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-generic-lpae | <5.4.0.167.164 | 5.4.0.167.164 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-ibm-lts-20.04 | <5.4.0.1061.90 | 5.4.0.1061.90 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-kvm | <5.4.0.1103.99 | 5.4.0.1103.99 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-lowlatency | <5.4.0.167.164 | 5.4.0.167.164 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-oem | <5.4.0.167.164 | 5.4.0.167.164 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-oem-osp1 | <5.4.0.167.164 | 5.4.0.167.164 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-oracle-lts-20.04 | <5.4.0.1113.106 | 5.4.0.1113.106 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-raspi | <5.4.0.1098.128 | 5.4.0.1098.128 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-raspi2 | <5.4.0.1098.128 | 5.4.0.1098.128 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-virtual | <5.4.0.167.164 | 5.4.0.167.164 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-xilinx-zynqmp | <5.4.0.1034.34 | 5.4.0.1034.34 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-1061-ibm | <5.4.0-1061.66~18.04.1 | 5.4.0-1061.66~18.04.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-1098-raspi | <5.4.0-1098.110~18.04.2 | 5.4.0-1098.110~18.04.2 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-1113-oracle | <5.4.0-1113.122~18.04.1 | 5.4.0-1113.122~18.04.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-1114-aws | <5.4.0-1114.124~18.04.1 | 5.4.0-1114.124~18.04.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-167-generic | <5.4.0-167.184~18.04.1 | 5.4.0-167.184~18.04.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-5.4.0-167-lowlatency | <5.4.0-167.184~18.04.1 | 5.4.0-167.184~18.04.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-aws | <5.4.0.1114.92 | 5.4.0.1114.92 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-generic-hwe-18.04 | <5.4.0.167.184~18.04.135 | 5.4.0.167.184~18.04.135 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-ibm | <5.4.0.1061.72 | 5.4.0.1061.72 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-lowlatency-hwe-18.04 | <5.4.0.167.184~18.04.135 | 5.4.0.167.184~18.04.135 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-oem | <5.4.0.167.184~18.04.135 | 5.4.0.167.184~18.04.135 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-oem-osp1 | <5.4.0.167.184~18.04.135 | 5.4.0.167.184~18.04.135 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-oracle | <5.4.0.1113.122~18.04.85 | 5.4.0.1113.122~18.04.85 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-raspi-hwe-18.04 | <5.4.0.1098.95 | 5.4.0.1098.95 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-snapdragon-hwe-18.04 | <5.4.0.167.184~18.04.135 | 5.4.0.167.184~18.04.135 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/linux-image-virtual-hwe-18.04 | <5.4.0.167.184~18.04.135 | 5.4.0.167.184~18.04.135 |
| Ubuntu Ubuntu | =18.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2023-31085
- https://ubuntu.com/security/CVE-2023-45871
- https://ubuntu.com/security/notices/USN-6461-1
- https://ubuntu.com/security/notices/USN-6494-1
- https://ubuntu.com/security/notices/USN-6496-1
- https://ubuntu.com/security/notices/USN-6502-1
- https://ubuntu.com/security/notices/USN-6503-1
- https://ubuntu.com/security/notices/USN-6516-1
- https://ubuntu.com/security/notices/USN-6502-2
- https://ubuntu.com/security/notices/USN-6502-3
- https://ubuntu.com/security/notices/USN-6520-1
- https://ubuntu.com/security/notices/USN-6494-2
- https://ubuntu.com/security/notices/USN-6495-2
- https://ubuntu.com/security/notices/USN-6496-2
- https://ubuntu.com/security/notices/USN-6502-4
- https://ubuntu.com/security/notices/USN-6532-1
- https://ubuntu.com/security/notices/USN-6537-1
- https://ubuntu.com/security/notices/USN-6572-1
- https://launchpad.net/ubuntu/+source/linux-signed-iot/5.4.0-1026.27
- https://launchpad.net/ubuntu/+source/linux-xilinx-zynqmp/5.4.0-1034.38
- https://launchpad.net/ubuntu/+source/linux-signed-ibm/5.4.0-1061.66
- https://launchpad.net/ubuntu/+source/linux-signed-bluefield/5.4.0-1075.81
- https://launchpad.net/ubuntu/+source/linux-raspi/5.4.0-1098.110
- https://launchpad.net/ubuntu/+source/linux-signed-kvm/5.4.0-1103.110
- https://launchpad.net/ubuntu/+source/linux-signed-oracle/5.4.0-1113.122
- https://launchpad.net/ubuntu/+source/linux-signed-aws/5.4.0-1114.124
- https://launchpad.net/ubuntu/+source/linux-signed/5.4.0-167.184
- https://launchpad.net/ubuntu/+source/linux/5.4.0-167.184
- https://launchpad.net/ubuntu/+source/linux-meta-aws/5.4.0.1114.111
- https://launchpad.net/ubuntu/+source/linux-meta-bluefield/5.4.0.1075.70
- https://launchpad.net/ubuntu/+source/linux-meta/5.4.0.167.164
- https://launchpad.net/ubuntu/+source/linux-meta-ibm/5.4.0.1061.90
- https://launchpad.net/ubuntu/+source/linux-meta-kvm/5.4.0.1103.99
- https://launchpad.net/ubuntu/+source/linux-meta-oracle/5.4.0.1113.106
- https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.4.0.1098.128
- https://launchpad.net/ubuntu/+source/linux-meta-xilinx-zynqmp/5.4.0.1034.34
- https://ubuntu.com/security/notices/USN-6495-1 (Advisory)
- agent/type
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/weakness
- agent/references
- agent/title
- agent/description
- agent/event
- agent/tags
- agent/trending
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/20.04
- version/ubuntu ubuntu/18.04