USN-7295-1: Linux kernel vulnerabilities
Ye Zhang and Nicolas Wu discovered that the iouring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-21400) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7295-1?
USN-7295-1 is classified as a medium severity vulnerability that may lead to a denial of service.
How do I fix USN-7295-1?
To fix USN-7295-1, you should upgrade to the patched version of the linux-image package provided by Ubuntu.
Who discovered the vulnerability USN-7295-1?
The vulnerability USN-7295-1 was discovered by Ye Zhang and Nicolas Wu.
What systems are affected by USN-7295-1?
USN-7295-1 affects Ubuntu 20.04 systems running specific versions of the Linux kernel.
Can USN-7295-1 lead to arbitrary code execution?
Yes, USN-7295-1 may allow a local attacker to execute arbitrary code under certain conditions.