Kirill Tkhai discovered that the XFS file system implementation in the Linux kernel did not calculate size correctly when pre-allocating space in some situations. A local attacker could use this to expose sensitive information. (CVE-2021-4155)
Lee Jones discovered that a use-after-free vulnerability existed in the Bluetooth implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-20566)
Duoming Zhou discovered that a race condition existed in the SLIP driver in the Linux kernel, leading to a null pointer dereference vulnerability. An attacker could use this to cause a denial of service (system crash). (CVE-2022-41858)
Tamás Koczka discovered that the Bluetooth L2CAP implementation in the Linux kernel did not properly initialize memory in some situations. A physically proximate attacker could possibly use this to expose sensitive information (kernel memory). (CVE-2022-42895)
José Oliveira and Rodrigo Branco discovered that the prctl syscall implementation in the Linux kernel did not properly protect against indirect branch prediction attacks in some situations. A local attacker could possibly use this to expose sensitive information. (CVE-2023-0045)
It was discovered that the RNDIS USB driver in the Linux kernel contained an integer overflow vulnerability. A local attacker with physical access could plug in a malicious USB device to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-23559)
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_version": "4.4.0-1154.169", "binary_name": "linux-aws-cloud-tools-4.4.0-1154" }, { "binary_version": "4.4.0-1154.169", "binary_name": "linux-aws-headers-4.4.0-1154" }, { "binary_version": "4.4.0-1154.169", "binary_name": "linux-aws-tools-4.4.0-1154" }, { "binary_version": "4.4.0-1154.169", "binary_name": "linux-buildinfo-4.4.0-1154-aws" }, { "binary_version": "4.4.0-1154.169", "binary_name": "linux-cloud-tools-4.4.0-1154-aws" }, { "binary_version": "4.4.0-1154.169", "binary_name": "linux-headers-4.4.0-1154-aws" }, { "binary_version": "4.4.0-1154.169", "binary_name": "linux-image-4.4.0-1154-aws" }, { "binary_version": "4.4.0-1154.169", "binary_name": "linux-image-4.4.0-1154-aws-dbgsym" }, { "binary_version": "4.4.0-1154.169", "binary_name": "linux-modules-4.4.0-1154-aws" }, { "binary_version": "4.4.0-1154.169", "binary_name": "linux-modules-extra-4.4.0-1154-aws" }, { "binary_version": "4.4.0-1154.169", "binary_name": "linux-tools-4.4.0-1154-aws" } ] }