USN-7123-1: Linux kernel (Azure) vulnerabilities
It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate certain SMB messages, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-6610) Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service (guest crash) or possibly execute arbitrary code. (CVE-2024-25744) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7123-1?
The vulnerability USN-7123-1 has a high severity rating due to the potential for denial of service.
How do I fix USN-7123-1?
To resolve the vulnerabilities associated with USN-7123-1, update your Linux kernel to version 5.15.0-1075.84 or later.
What systems are affected by USN-7123-1?
USN-7123-1 affects Ubuntu 22.04 systems running specific versions of the Linux kernel, namely linux-image-5.15.0-1075-azure and linux-image-azure-lts-22.04.
What causes the vulnerability in USN-7123-1?
The USN-7123-1 vulnerability is caused by improper validation of SMB messages in the CIFS network file system implementation of the Linux kernel.
Can USN-7123-1 lead to data exposure?
Yes, USN-7123-1 may potentially lead to data exposure alongside the risk of causing a system crash.