USN-6647-2: Linux kernel (Azure) vulnerabilities
First published: Thu Feb 29 2024(Updated: )
It was discovered that a race condition existed in the ATM (Asynchronous Transfer Mode) subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-51780) It was discovered that a race condition existed in the Rose X.25 protocol implementation in the Linux kernel, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-51782) It was discovered that the netfilter connection tracker for netlink in the Linux kernel did not properly perform reference counting in some error conditions. A local attacker could possibly use this to cause a denial of service (memory exhaustion). (CVE-2023-7192)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-4.15.0-1174-azure | <4.15.0-1174.189~14.04.1 | 4.15.0-1174.189~14.04.1 |
| Ubuntu Ubuntu | =14.04 | |
| All of | ||
| ubuntu/linux-image-azure | <4.15.0.1174.140 | 4.15.0.1174.140 |
| Ubuntu Ubuntu | =14.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2023-51780
- https://ubuntu.com/security/CVE-2023-7192
- https://ubuntu.com/security/CVE-2023-51782
- https://ubuntu.com/security/notices/USN-6639-1
- https://ubuntu.com/security/notices/USN-6646-1
- https://ubuntu.com/security/notices/USN-6647-1
- https://ubuntu.com/security/notices/USN-6651-1
- https://ubuntu.com/security/notices/USN-6652-1
- https://ubuntu.com/security/notices/USN-6653-1
- https://ubuntu.com/security/notices/USN-6651-2
- https://ubuntu.com/security/notices/USN-6653-2
- https://ubuntu.com/security/notices/USN-6653-3
- https://ubuntu.com/security/notices/USN-6651-3
- https://ubuntu.com/security/notices/USN-6653-4
- https://ubuntu.com/security/notices/USN-6681-1
- https://ubuntu.com/security/notices/USN-6681-2
- https://ubuntu.com/security/notices/USN-6681-3
- https://ubuntu.com/security/notices/USN-6681-4
- https://ubuntu.com/security/notices/USN-6716-1
- https://ubuntu.com/security/notices/USN-6645-1
- https://ubuntu.com/security/notices/LSN-0101-1
- https://ubuntu.com/security/notices/LSN-0105-1
- https://ubuntu.com/security/notices/USN-6680-1
- https://ubuntu.com/security/notices/USN-6686-1
- https://ubuntu.com/security/notices/USN-6680-2
- https://ubuntu.com/security/notices/USN-6686-2
- https://ubuntu.com/security/notices/USN-6680-3
- https://ubuntu.com/security/notices/USN-6686-3
- https://ubuntu.com/security/notices/USN-6686-4
- https://ubuntu.com/security/notices/USN-6705-1
- https://ubuntu.com/security/notices/USN-6686-5
- https://ubuntu.com/security/notices/USN-6647-2 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/title
- agent/softwarecombine
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- agent/references
- agent/tags
- agent/trending
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/14.04