USN-6821-3: Linux kernel (AWS) vulnerabilities
It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270) It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042) It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841) Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099) It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6821-3?
USN-6821-3 is considered a high severity vulnerability due to its use-after-free nature that can lead to denial of service or arbitrary code execution.
How do I fix USN-6821-3?
To fix USN-6821-3, update your system to the patched versions of the Linux kernel provided by Ubuntu.
What systems are affected by USN-6821-3?
USN-6821-3 affects Ubuntu 22.04 and 20.04 running specific versions of the 'linux-image' packages.
What type of vulnerability is USN-6821-3?
USN-6821-3 is a use-after-free vulnerability found in the ATA over Ethernet driver's implementation in the Linux kernel.
Can USN-6821-3 be exploited remotely?
Yes, an attacker could potentially exploit USN-6821-3 to cause a denial of service or execute arbitrary code, but it requires local access or conditions that may lead to an exploit.