USN-6647-2: Linux kernel (Azure) vulnerabilities
It was discovered that a race condition existed in the ATM (Asynchronous Transfer Mode) subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-51780) It was discovered that a race condition existed in the Rose X.25 protocol implementation in the Linux kernel, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-51782) It was discovered that the netfilter connection tracker for netlink in the Linux kernel did not properly perform reference counting in some error conditions. A local attacker could possibly use this to cause a denial of service (memory exhaustion). (CVE-2023-7192)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6647-2?
The severity of USN-6647-2 is high, as it could lead to a denial of service or arbitrary code execution.
How do I fix USN-6647-2?
To fix USN-6647-2, upgrade to the recommended Linux kernel versions: 4.15.0-1174.189~14.04.1 or 4.15.0.1174.140 for Ubuntu 14.04.
What type of attack is facilitated by USN-6647-2?
USN-6647-2 facilitates local denial of service attacks and potentially allows arbitrary code execution due to a race condition.
What versions of Ubuntu are affected by USN-6647-2?
USN-6647-2 affects Ubuntu version 14.04 with specific kernel package versions.
Is a reboot required after applying the fix for USN-6647-2?
Yes, a system reboot is required to apply the new kernel and mitigate the vulnerability after upgrading.