USN-6339-4
- Source
- https://ubuntu.com/security/notices/USN-6339-4
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6339-4.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-6339-4
- Upstream
- Related
- Published
- 2023-09-18T16:47:17.272147Z
- Modified
- 2025-10-13T04:36:35Z
- Summary
- linux-intel-iotg vulnerabilities
- Details
-
It was discovered that the NTFS file system implementation in the Linux kernel did not properly validate MFT flags in certain situations. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2022-48425)
Zi Fan Tan discovered that the binder IPC implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-21255)
It was discovered that a race condition existed in the f2fs file system in the Linux kernel, leading to a null pointer dereference vulnerability. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2023-2898)
It was discovered that the DVB Core driver in the Linux kernel did not properly handle locking events in certain situations. A local attacker could use this to cause a denial of service (kernel deadlock). (CVE-2023-31084)
Yang Lan discovered that the GFS2 file system implementation in the Linux kernel could attempt to dereference a null pointer in some situations. An attacker could use this to construct a malicious GFS2 image that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2023-3212)
It was discovered that the KSMBD implementation in the Linux kernel did not properly validate buffer sizes in certain operations, leading to an out-of- bounds read vulnerability. A remote attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-38426, CVE-2023-38428)
It was discovered that the KSMBD implementation in the Linux kernel did not properly calculate the size of certain buffers. A remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-38429)
- References
-
- https://ubuntu.com/security/notices/USN-6339-4
- https://ubuntu.com/security/CVE-2022-48425
- https://ubuntu.com/security/CVE-2023-2898
- https://ubuntu.com/security/CVE-2023-3212
- https://ubuntu.com/security/CVE-2023-21255
- https://ubuntu.com/security/CVE-2023-31084
- https://ubuntu.com/security/CVE-2023-38426
- https://ubuntu.com/security/CVE-2023-38428
- https://ubuntu.com/security/CVE-2023-38429
Affected packages
Ubuntu:22.04:LTS / linux-intel-iotg
Package
- Name
- linux-intel-iotg
- Purl
- pkg:deb/ubuntu/linux-intel-iotg@5.15.0-1039.45?arch=source&distro=jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.15.0-1039.45
Affected versions
5.*
Ecosystem specific
{
"binaries": [
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-buildinfo-5.15.0-1039-intel-iotg"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-cloud-tools-5.15.0-1039-intel-iotg"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-headers-5.15.0-1039-intel-iotg"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-image-unsigned-5.15.0-1039-intel-iotg"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-intel-iotg-cloud-tools-5.15.0-1039"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-intel-iotg-cloud-tools-common"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-intel-iotg-headers-5.15.0-1039"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-intel-iotg-tools-5.15.0-1039"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-intel-iotg-tools-common"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-intel-iotg-tools-host"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-modules-5.15.0-1039-intel-iotg"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-modules-extra-5.15.0-1039-intel-iotg"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-modules-iwlwifi-5.15.0-1039-intel-iotg"
},
{
"binary_version": "5.15.0-1039.45",
"binary_name": "linux-tools-5.15.0-1039-intel-iotg"
}
],
"availability": "No subscription required"
}
Database specific
{
"cves_map": {
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2022-48425"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2023-2898"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2023-3212"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2023-21255"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"id": "CVE-2023-31084"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2023-38426"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2023-38428"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2023-38429"
}
],
"ecosystem": "Ubuntu:22.04:LTS"
}
}