USN-6765-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-6765-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6765-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-6765-1
Related
Withdrawn
2024-05-07T16:22:10Z
Published
2024-05-07T15:22:10Z
Modified
2026-02-04T04:30:27Z
Summary
linux-oem-6.5 vulnerabilities
Details

Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service (system crash). (CVE-2023-6356, CVE-2023-6535, CVE-2023-6536)

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)

Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-23849)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A privileged local attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-24860)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • S390 architecture;
  • Core kernel;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Android drivers;
  • Drivers core;
  • Power management core;
  • Bus devices;
  • Hardware random number generator core;
  • Device frequency;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCMI message protocol;
  • GPU drivers;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Media drivers;
  • Multifunction device drivers;
  • MTD block device drivers;
  • Network drivers;
  • NVME drivers;
  • PCI driver for MicroSemi Switchtec;
  • x86 platform drivers;
  • Power supply drivers;
  • SCSI drivers;
  • QCOM SoC drivers;
  • SPMI drivers;
  • Thermal drivers;
  • TTY drivers;
  • VFIO drivers;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system server daemon;
  • Pstore file system;
  • ReiserFS file system;
  • SMB network file system;
  • BPF subsystem;
  • Memory management;
  • TLS protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Netfilter;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • AppArmor security module; (CVE-2023-52635, CVE-2024-26632, CVE-2023-52468, CVE-2023-52472, CVE-2023-52589, CVE-2024-26671, CVE-2024-26640, CVE-2024-26631, CVE-2023-52489, CVE-2023-52616, CVE-2023-52445, CVE-2023-52463, CVE-2024-26610, CVE-2023-52497, CVE-2023-52453, CVE-2023-52470, CVE-2024-26649, CVE-2023-52583, CVE-2024-26644, CVE-2023-52607, CVE-2023-52587, CVE-2024-26594, CVE-2023-52618, CVE-2023-52495, CVE-2023-52632, CVE-2024-26583, CVE-2023-52633, CVE-2023-52591, CVE-2024-26633, CVE-2023-52627, CVE-2024-26670, CVE-2024-26598, CVE-2024-26592, CVE-2023-52473, CVE-2023-52623, CVE-2023-52446, CVE-2023-52443, CVE-2023-52451, CVE-2024-26629, CVE-2023-52462, CVE-2024-26808, CVE-2023-52598, CVE-2023-52611, CVE-2023-52492, CVE-2023-52456, CVE-2023-52626, CVE-2023-52455, CVE-2024-26641, CVE-2023-52588, CVE-2023-52608, CVE-2024-26618, CVE-2024-26582, CVE-2023-52609, CVE-2023-52604, CVE-2024-26646, CVE-2024-26634, CVE-2023-52469, CVE-2023-52467, CVE-2023-52447, CVE-2024-26623, CVE-2023-52621, CVE-2024-26647, CVE-2024-26615, CVE-2023-52450, CVE-2023-52619, CVE-2023-52610, CVE-2023-52606, CVE-2023-52464, CVE-2023-52465, CVE-2024-26638, CVE-2023-52498, CVE-2024-26625, CVE-2023-52449, CVE-2023-52584, CVE-2023-52454, CVE-2023-52458, CVE-2024-26585, CVE-2024-26669, CVE-2023-52493, CVE-2024-26645, CVE-2024-26607, CVE-2023-52615, CVE-2023-52617, CVE-2024-26612, CVE-2024-26668, CVE-2023-52594, CVE-2023-52612, CVE-2024-26584, CVE-2024-26586, CVE-2024-26616, CVE-2024-26673, CVE-2023-52448, CVE-2024-26620, CVE-2023-52614, CVE-2024-26636, CVE-2023-52602, CVE-2023-52452, CVE-2023-52601, CVE-2024-26635, CVE-2024-26627, CVE-2023-52488, CVE-2023-52487, CVE-2023-52597, CVE-2023-52494, CVE-2023-52444, CVE-2024-26608, CVE-2023-52593, CVE-2023-52491, CVE-2023-52595, CVE-2023-52599, CVE-2024-26595, CVE-2023-52622, CVE-2024-26650, CVE-2024-26614, CVE-2023-52490, CVE-2023-52486, CVE-2023-52457)
References

Affected packages

Ubuntu:22.04:LTS / linux-oem-6.5

Package

Name
linux-oem-6.5
Purl
pkg:deb/ubuntu/linux-oem-6.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.5.0-1022.23

Ecosystem specific 

{
    "availability": "No subscription needed",
    "binaries": [
        {
            "linux-buildinfo-6.5.0-1022-oem": "6.5.0-1022.23",
            "linux-headers-6.5.0-1022-oem": "6.5.0-1022.23",
            "linux-headers-oem-22.04": "6.5.0.1022.24",
            "linux-headers-oem-22.04a": "6.5.0.1022.24",
            "linux-headers-oem-22.04b": "6.5.0.1022.24",
            "linux-headers-oem-22.04c": "6.5.0.1022.24",
            "linux-headers-oem-22.04d": "6.5.0.1022.24",
            "linux-image-6.5.0-1022-oem": "6.5.0-1022.23",
            "linux-image-oem-22.04": "6.5.0.1022.24",
            "linux-image-oem-22.04a": "6.5.0.1022.24",
            "linux-image-oem-22.04b": "6.5.0.1022.24",
            "linux-image-oem-22.04c": "6.5.0.1022.24",
            "linux-image-oem-22.04d": "6.5.0.1022.24",
            "linux-image-uc-6.5.0-1022-oem": "6.5.0-1022.23",
            "linux-image-uc-oem-22.04": "6.5.0.1022.24",
            "linux-image-uc-oem-22.04d": "6.5.0.1022.24",
            "linux-image-unsigned-6.5.0-1022-oem": "6.5.0-1022.23",
            "linux-modules-6.5.0-1022-oem": "6.5.0-1022.23",
            "linux-modules-ipu6-6.5.0-1022-oem": "6.5.0-1022.23",
            "linux-modules-ipu6-oem-22.04": "6.5.0.1022.24",
            "linux-modules-ipu6-oem-22.04b": "6.5.0.1022.24",
            "linux-modules-ipu6-oem-22.04c": "6.5.0.1022.24",
            "linux-modules-ipu6-oem-22.04d": "6.5.0.1022.24",
            "linux-modules-ivsc-6.5.0-1022-oem": "6.5.0-1022.23",
            "linux-modules-ivsc-oem-22.04": "6.5.0.1022.24",
            "linux-modules-ivsc-oem-22.04b": "6.5.0.1022.24",
            "linux-modules-ivsc-oem-22.04c": "6.5.0.1022.24",
            "linux-modules-ivsc-oem-22.04d": "6.5.0.1022.24",
            "linux-modules-iwlwifi-6.5.0-1022-oem": "6.5.0-1022.23",
            "linux-modules-iwlwifi-oem-22.04": "6.5.0.1022.24",
            "linux-modules-iwlwifi-oem-22.04b": "6.5.0.1022.24",
            "linux-modules-iwlwifi-oem-22.04c": "6.5.0.1022.24",
            "linux-modules-iwlwifi-oem-22.04d": "6.5.0.1022.24",
            "linux-modules-usbio-6.5.0-1022-oem": "6.5.0-1022.23",
            "linux-modules-usbio-oem-22.04": "6.5.0.1022.24",
            "linux-modules-usbio-oem-22.04d": "6.5.0.1022.24",
            "linux-oem-22.04": "6.5.0.1022.24",
            "linux-oem-22.04a": "6.5.0.1022.24",
            "linux-oem-22.04b": "6.5.0.1022.24",
            "linux-oem-22.04c": "6.5.0.1022.24",
            "linux-oem-22.04d": "6.5.0.1022.24",
            "linux-oem-6.5-headers-6.5.0-1022": "6.5.0-1022.23",
            "linux-oem-6.5-lib-rust-6.5.0-1022-oem": "6.5.0-1022.23",
            "linux-oem-6.5-tools-6.5.0-1022": "6.5.0-1022.23",
            "linux-oem-6.5-tools-host": "6.5.0-1022.23",
            "linux-tools-6.5.0-1022-oem": "6.5.0-1022.23",
            "linux-tools-oem-22.04": "6.5.0.1022.24",
            "linux-tools-oem-22.04a": "6.5.0.1022.24",
            "linux-tools-oem-22.04b": "6.5.0.1022.24",
            "linux-tools-oem-22.04c": "6.5.0.1022.24",
            "linux-tools-oem-22.04d": "6.5.0.1022.24"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6765-1.json"