USN-6324-1

See a problem?
Source
https://ubuntu.com/security/notices/USN-6324-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6324-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-6324-1
Related
Published
2023-08-31T13:23:41.893982Z
Modified
2023-08-31T13:23:41.893982Z
Summary
linux-gkeop vulnerabilities
Details

Daniel Moghimi discovered that some Intel(R) Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. (CVE-2022-40982)

Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information. (CVE-2023-20593)

It was discovered that the universal 32bit network packet classifier implementation in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-3609)

It was discovered that the Quick Fair Queueing network scheduler implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-3611)

It was discovered that the network packet classifier with netfilter/firewall marks implementation in the Linux kernel did not properly handle reference counting, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-3776)

References

Affected packages

Ubuntu:20.04:LTS / linux-gkeop

Package

Name
linux-gkeop
Purl
pkg:deb/ubuntu/linux-gkeop@5.4.0-1075.79?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.4.0-1075.79

Affected versions

5.*

5.4.0-1008.9
5.4.0-1009.10
5.4.0-1010.11
5.4.0-1011.12
5.4.0-1012.13
5.4.0-1013.14
5.4.0-1014.15
5.4.0-1015.16
5.4.0-1016.17
5.4.0-1018.19
5.4.0-1021.22
5.4.0-1022.23
5.4.0-1023.24
5.4.0-1024.25
5.4.0-1025.26
5.4.0-1026.27
5.4.0-1027.28
5.4.0-1029.30
5.4.0-1031.32
5.4.0-1032.33
5.4.0-1033.34
5.4.0-1034.35
5.4.0-1036.37
5.4.0-1037.38
5.4.0-1038.39
5.4.0-1039.40
5.4.0-1040.41
5.4.0-1043.44
5.4.0-1046.48
5.4.0-1048.51
5.4.0-1049.52
5.4.0-1051.54
5.4.0-1052.55
5.4.0-1053.56
5.4.0-1054.57
5.4.0-1056.60
5.4.0-1057.61
5.4.0-1060.64
5.4.0-1061.65
5.4.0-1062.66
5.4.0-1064.68
5.4.0-1065.69
5.4.0-1066.70
5.4.0-1067.71
5.4.0-1068.72
5.4.0-1069.73
5.4.0-1070.74
5.4.0-1071.75
5.4.0-1072.76
5.4.0-1073.77
5.4.0-1074.78

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "linux-gkeop-headers-5.4.0-1075": "5.4.0-1075.79",
            "linux-gkeop-tools-5.4.0-1075": "5.4.0-1075.79",
            "linux-gkeop-cloud-tools-5.4.0-1075": "5.4.0-1075.79",
            "linux-modules-extra-5.4.0-1075-gkeop": "5.4.0-1075.79",
            "linux-gkeop-source-5.4.0": "5.4.0-1075.79",
            "linux-cloud-tools-5.4.0-1075-gkeop": "5.4.0-1075.79",
            "linux-tools-5.4.0-1075-gkeop": "5.4.0-1075.79",
            "linux-buildinfo-5.4.0-1075-gkeop": "5.4.0-1075.79",
            "linux-headers-5.4.0-1075-gkeop": "5.4.0-1075.79",
            "linux-image-unsigned-5.4.0-1075-gkeop": "5.4.0-1075.79",
            "linux-image-unsigned-5.4.0-1075-gkeop-dbgsym": "5.4.0-1075.79",
            "linux-modules-5.4.0-1075-gkeop": "5.4.0-1075.79"
        }
    ]
}