Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA driver in the Linux kernel did not properly check for zero-length STAG or MR registration. A remote attacker could possibly use this to execute arbitrary code. (CVE-2023-25775)
Yu Hao discovered that the UBI driver in the Linux kernel did not properly check for MTD with zero erasesize during device attachment. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2023-31085)
Manfred Rudigier discovered that the Intel(R) PCI-Express Gigabit (igb) Ethernet driver in the Linux kernel did not properly validate received frames that are larger than the set MTU size, leading to a buffer overflow vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-45871)
Maxim Levitsky discovered that the KVM nested virtualization (SVM) implementation for AMD processors in the Linux kernel did not properly handle x2AVIC MSRs. An attacker in a guest VM could use this to cause a denial of service (host kernel crash). (CVE-2023-5090)
It was discovered that the SMB network file sharing protocol implementation in the Linux kernel did not properly handle certain error conditions, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-5345)
{ "binaries": [ { "binary_version": "6.2.0-1016.16~22.04.1", "binary_name": "linux-aws-6.2-cloud-tools-6.2.0-1016" }, { "binary_version": "6.2.0-1016.16~22.04.1", "binary_name": "linux-aws-6.2-headers-6.2.0-1016" }, { "binary_version": "6.2.0-1016.16~22.04.1", "binary_name": "linux-aws-6.2-tools-6.2.0-1016" }, { "binary_version": "6.2.0-1016.16~22.04.1", "binary_name": "linux-buildinfo-6.2.0-1016-aws" }, { "binary_version": "6.2.0-1016.16~22.04.1", "binary_name": "linux-cloud-tools-6.2.0-1016-aws" }, { "binary_version": "6.2.0-1016.16~22.04.1", "binary_name": "linux-headers-6.2.0-1016-aws" }, { "binary_version": "6.2.0-1016.16~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1016-aws" }, { "binary_version": "6.2.0-1016.16~22.04.1", "binary_name": "linux-modules-6.2.0-1016-aws" }, { "binary_version": "6.2.0-1016.16~22.04.1", "binary_name": "linux-modules-extra-6.2.0-1016-aws" }, { "binary_version": "6.2.0-1016.16~22.04.1", "binary_name": "linux-tools-6.2.0-1016-aws" } ], "availability": "No subscription required" }
{ "cves_map": { "cves": [ { "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "high", "type": "Ubuntu" } ], "id": "CVE-2023-5090" }, { "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" }, { "score": "high", "type": "Ubuntu" } ], "id": "CVE-2023-5345" }, { "severity": [ { "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "type": "CVSS_V3" }, { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ], "id": "CVE-2023-25775" }, { "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "low", "type": "Ubuntu" } ], "id": "CVE-2023-31085" }, { "severity": [ { "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ], "id": "CVE-2023-45871" } ], "ecosystem": "Ubuntu:22.04:LTS" } }
{ "binaries": [ { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-buildinfo-6.2.0-37-generic" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-buildinfo-6.2.0-37-generic-64k" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-buildinfo-6.2.0-37-generic-lpae" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-cloud-tools-6.2.0-37-generic" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-headers-6.2.0-37-generic" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-headers-6.2.0-37-generic-64k" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-headers-6.2.0-37-generic-lpae" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-hwe-6.2-cloud-tools-6.2.0-37" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-hwe-6.2-cloud-tools-common" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-hwe-6.2-headers-6.2.0-37" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-hwe-6.2-tools-6.2.0-37" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-hwe-6.2-tools-common" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-hwe-6.2-tools-host" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-image-6.2.0-37-generic" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-image-6.2.0-37-generic-lpae" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-37-generic" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-37-generic-64k" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-modules-6.2.0-37-generic" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-modules-6.2.0-37-generic-64k" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-modules-6.2.0-37-generic-lpae" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-modules-extra-6.2.0-37-generic" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-modules-ipu6-6.2.0-37-generic" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-modules-ivsc-6.2.0-37-generic" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-modules-iwlwifi-6.2.0-37-generic" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-source-6.2.0" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-tools-6.2.0-37-generic" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-tools-6.2.0-37-generic-64k" }, { "binary_version": "6.2.0-37.38~22.04.1", "binary_name": "linux-tools-6.2.0-37-generic-lpae" } ], "availability": "No subscription required" }
{ "cves_map": { "cves": [ { "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "high", "type": "Ubuntu" } ], "id": "CVE-2023-5090" }, { "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" }, { "score": "high", "type": "Ubuntu" } ], "id": "CVE-2023-5345" }, { "severity": [ { "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "type": "CVSS_V3" }, { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ], "id": "CVE-2023-25775" }, { "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "low", "type": "Ubuntu" } ], "id": "CVE-2023-31085" }, { "severity": [ { "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ], "id": "CVE-2023-45871" } ], "ecosystem": "Ubuntu:22.04:LTS" } }
{ "binaries": [ { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-buildinfo-6.2.0-1017-lowlatency" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-buildinfo-6.2.0-1017-lowlatency-64k" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-cloud-tools-6.2.0-1017-lowlatency" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-headers-6.2.0-1017-lowlatency" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-headers-6.2.0-1017-lowlatency-64k" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1017-lowlatency" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1017-lowlatency-64k" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-6.2.0-1017" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-common" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-lowlatency-hwe-6.2-headers-6.2.0-1017" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-lowlatency-hwe-6.2-tools-6.2.0-1017" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-lowlatency-hwe-6.2-tools-common" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-lowlatency-hwe-6.2-tools-host" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-modules-6.2.0-1017-lowlatency" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-modules-6.2.0-1017-lowlatency-64k" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-modules-ipu6-6.2.0-1017-lowlatency" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-modules-ivsc-6.2.0-1017-lowlatency" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-modules-iwlwifi-6.2.0-1017-lowlatency" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-tools-6.2.0-1017-lowlatency" }, { "binary_version": "6.2.0-1017.17~22.04.1", "binary_name": "linux-tools-6.2.0-1017-lowlatency-64k" } ], "availability": "No subscription required" }
{ "cves_map": { "cves": [ { "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "high", "type": "Ubuntu" } ], "id": "CVE-2023-5090" }, { "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" }, { "score": "high", "type": "Ubuntu" } ], "id": "CVE-2023-5345" }, { "severity": [ { "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "type": "CVSS_V3" }, { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ], "id": "CVE-2023-25775" }, { "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "low", "type": "Ubuntu" } ], "id": "CVE-2023-31085" }, { "severity": [ { "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ], "id": "CVE-2023-45871" } ], "ecosystem": "Ubuntu:22.04:LTS" } }