USN-6577-1: Linux kernel (AWS) vulnerabilities
Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii Oleksenko discovered that some AMD processors could leak stale data from division operations in certain situations. A local attacker could possibly use this to expose sensitive information. (CVE-2023-20588) It was discovered that a race condition existed in the Linux kernel when performing operations with kernel objects, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2023-45863)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6577-1?
The severity of USN-6577-1 is critical due to the potential for local attackers to leak sensitive information from affected AMD processors.
How do I fix USN-6577-1?
To fix USN-6577-1, update to the recommended Linux kernel versions, specifically linux-image-4.4.0-1164.179 or linux-image-aws 4.4.0-1164.168.
Which versions of Ubuntu are affected by USN-6577-1?
Ubuntu 16.04 is affected by USN-6577-1 due to vulnerabilities in specific Linux kernel images.
What kind of data is at risk with USN-6577-1?
USN-6577-1 poses a risk of leaking stale data from division operations that could expose sensitive information.
Is the vulnerability USN-6577-1 limited to certain processors?
Yes, USN-6577-1 specifically affects certain AMD processors that can leak data under specific conditions.