USN-6093-1

See a problem?
Source
https://ubuntu.com/security/notices/USN-6093-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6093-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-6093-1
Related
Published
2023-05-22T13:29:37.746042Z
Modified
2023-05-22T13:29:37.746042Z
Summary
linux-bluefield vulnerabilities
Details

It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the TCINDEX classifier has been removed. (CVE-2023-1829)

It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-1281)

Jiasheng Jiang discovered that the HSA Linux kernel driver for AMD Radeon GPU devices did not properly validate memory allocation in certain situations, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3108)

It was discovered that the infrared transceiver USB driver did not properly handle USB control messages. A local attacker with physical access could plug in a specially crafted USB device to cause a denial of service (memory exhaustion). (CVE-2022-3903)

Haowei Yan discovered that a race condition existed in the Layer 2 Tunneling Protocol (L2TP) implementation in the Linux kernel. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-4129)

Jordy Zomer and Alexandra Sandulescu discovered that syscalls invoking the do_prlimit() function in the Linux kernel did not properly handle speculative execution barriers. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2023-0458)

It was discovered that the Human Interface Device (HID) support driver in the Linux kernel contained a type confusion vulnerability in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-1073)

It was discovered that a memory leak existed in the SCTP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2023-1074)

Lianhui Tang discovered that the MPLS implementation in the Linux kernel did not properly handle certain sysctl allocation failure conditions, leading to a double-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-26545)

References

Affected packages

Ubuntu:20.04:LTS / linux-bluefield

Package

Name
linux-bluefield
Purl
pkg:deb/ubuntu/linux-bluefield?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.4.0-1062.68

Affected versions

5.*

5.4.0-1007.10
5.4.0-1011.14
5.4.0-1012.15
5.4.0-1013.16
5.4.0-1016.19
5.4.0-1019.22
5.4.0-1020.23
5.4.0-1021.24
5.4.0-1022.25
5.4.0-1023.26
5.4.0-1025.28
5.4.0-1026.29
5.4.0-1028.31
5.4.0-1030.33
5.4.0-1032.35
5.4.0-1035.38
5.4.0-1036.39
5.4.0-1040.44
5.4.0-1042.47
5.4.0-1044.49
5.4.0-1045.50
5.4.0-1046.51
5.4.0-1047.52
5.4.0-1049.55
5.4.0-1050.56
5.4.0-1054.60
5.4.0-1058.64
5.4.0-1059.65
5.4.0-1060.66

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "5.4.0-1062.68",
            "binary_name": "linux-bluefield-headers-5.4.0-1062"
        },
        {
            "binary_version": "5.4.0-1062.68",
            "binary_name": "linux-bluefield-tools-5.4.0-1062"
        },
        {
            "binary_version": "5.4.0-1062.68",
            "binary_name": "linux-buildinfo-5.4.0-1062-bluefield"
        },
        {
            "binary_version": "5.4.0-1062.68",
            "binary_name": "linux-headers-5.4.0-1062-bluefield"
        },
        {
            "binary_version": "5.4.0-1062.68",
            "binary_name": "linux-image-unsigned-5.4.0-1062-bluefield"
        },
        {
            "binary_version": "5.4.0-1062.68",
            "binary_name": "linux-image-unsigned-5.4.0-1062-bluefield-dbgsym"
        },
        {
            "binary_version": "5.4.0-1062.68",
            "binary_name": "linux-modules-5.4.0-1062-bluefield"
        },
        {
            "binary_version": "5.4.0-1062.68",
            "binary_name": "linux-tools-5.4.0-1062-bluefield"
        }
    ]
}