USN-7185-2: Linux kernel (Azure) vulnerabilities
Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402) Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in the Linux kernel during device removal. A privileged attacker could use this to cause a denial of service (system crash). (CVE-2023-35827) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7185-2?
The severity of USN-7185-2 is critical due to the potential for a local attacker to cause a denial of service.
How do I fix USN-7185-2?
To fix USN-7185-2, users should update to the recommended kernel versions for their respective Ubuntu releases.
Which systems are affected by USN-7185-2?
USN-7185-2 affects Ubuntu systems running kernel versions prior to the patched releases indicated in the advisory.
What type of vulnerability is described in USN-7185-2?
USN-7185-2 describes an integer overflow vulnerability in the VMware Virtual GPU DRM driver.
Who discovered the vulnerability in USN-7185-2?
The vulnerability in USN-7185-2 was discovered by Ziming Zhang.