USN-6079-1

See a problem?
Source
https://ubuntu.com/security/notices/USN-6079-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/USN-6079-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-6079-1
Related
  • CVE-2022-27672
  • CVE-2022-36280
  • CVE-2022-3707
  • CVE-2022-4129
  • CVE-2022-4842
  • CVE-2022-48423
  • CVE-2022-48424
  • CVE-2023-0210
  • CVE-2023-0394
  • CVE-2023-0458
  • CVE-2023-0459
  • CVE-2023-1073
  • CVE-2023-1074
  • CVE-2023-1075
  • CVE-2023-1078
  • CVE-2023-1118
  • CVE-2023-1513
  • CVE-2023-1652
  • CVE-2023-21102
  • CVE-2023-21106
  • CVE-2023-2162
  • CVE-2023-23454
  • CVE-2023-23455
  • CVE-2023-26544
  • CVE-2023-32269
Published
2023-05-16T13:55:34.541593Z
Modified
2023-05-16T13:55:34.541593Z
Summary
linux, linux-aws, linux-azure, linux-azure-5.19, linux-kvm, linux-lowlatency, linux-raspi vulnerabilities
Details

It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. (CVE-2022-27672)

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36280)

Zheng Wang discovered that the Intel i915 graphics driver in the Linux kernel did not properly handle certain error conditions, leading to a double-free. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3707)

Haowei Yan discovered that a race condition existed in the Layer 2 Tunneling Protocol (L2TP) implementation in the Linux kernel. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-4129)

It was discovered that the NTFS file system implementation in the Linux kernel contained a null pointer dereference in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-4842)

It was discovered that the NTFS file system implementation in the Linux kernel did not properly validate attributes in certain situations, leading to an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-48423)

It was discovered that the NTFS file system implementation in the Linux kernel did not properly validate attributes in certain situations, leading to an out-of-bounds read vulnerability. A local attacker could possibly use this to expose sensitive information (kernel memory). (CVE-2022-48424)

It was discovered that the KSMBD implementation in the Linux kernel did not properly validate buffer lengths, leading to a heap-based buffer overflow. A remote attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-0210)

Kyle Zeng discovered that the IPv6 implementation in the Linux kernel contained a NULL pointer dereference vulnerability in certain situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-0394)

Jordy Zomer and Alexandra Sandulescu discovered that syscalls invoking the do_prlimit() function in the Linux kernel did not properly handle speculative execution barriers. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2023-0458)

Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did not properly implement speculative execution barriers in usercopy functions in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2023-0459)

It was discovered that the Human Interface Device (HID) support driver in the Linux kernel contained a type confusion vulnerability in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-1073)

It was discovered that a memory leak existed in the SCTP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2023-1074)

It was discovered that the TLS subsystem in the Linux kernel contained a type confusion vulnerability in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-1075)

It was discovered that the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel contained a type confusion vulnerability in some situations. An attacker could use this to cause a denial of service (system crash). (CVE-2023-1078)

Xingyuan Mo discovered that the x86 KVM implementation in the Linux kernel did not properly initialize some data structures. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2023-1513)

It was discovered that the NFS implementation in the Linux kernel did not properly handle pending tasks in some situations. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information (kernel memory). (CVE-2023-1652)

It was discovered that the ARM64 EFI runtime services implementation in the Linux kernel did not properly manage concurrency calls. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-21102)

It was discovered that a race condition existed in Adreno GPU DRM driver in the Linux kernel, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-21106)

It was discovered that a use-after-free vulnerability existed in the iSCSI TCP implementation in the Linux kernel. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-2162)

Kyle Zeng discovered that the class-based queuing discipline implementation in the Linux kernel contained a type confusion vulnerability in some situations. An attacker could use this to cause a denial of service (system crash). (CVE-2023-23454)

Kyle Zeng discovered that the ATM VC queuing discipline implementation in the Linux kernel contained a type confusion vulnerability in some situations. An attacker could use this to cause a denial of service (system crash). (CVE-2023-23455)

It was discovered that the NTFS file system implementation in the Linux kernel did not properly validate the size of attributes when parsing MFT. A local attacker could possibly use this to cause a denial of service (system crash) or expose sensitive information (kernel memory). (CVE-2023-26544)

It was discovered that the NET/ROM protocol implementation in the Linux kernel contained a race condition in some situations, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-32269)

Duoming Zhou discovered that a race condition existed in the infrared receiver/transceiver driver in the Linux kernel, leading to a use-after- free vulnerability. A privileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-1118)

References

Affected packages

Ubuntu:22.04:LTS / linux-azure-5.19

Package

Name
linux-azure-5.19

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.19.0-1026.29~22.04.1

Ecosystem specific

{
    "availability": "No subscription needed",
    "binaries": [
        {
            "linux-modules-extra-azure-edge": "5.19.0.1026.29~22.04.1",
            "linux-cloud-tools-5.19.0-1026-azure": "5.19.0-1026.29~22.04.1",
            "linux-modules-extra-5.19.0-1026-azure": "5.19.0-1026.29~22.04.1",
            "linux-azure-5.19-cloud-tools-5.19.0-1026": "5.19.0-1026.29~22.04.1",
            "linux-image-unsigned-5.19.0-1026-azure": "5.19.0-1026.29~22.04.1",
            "linux-azure-edge": "5.19.0.1026.29~22.04.1",
            "linux-headers-azure-edge": "5.19.0.1026.29~22.04.1",
            "linux-tools-5.19.0-1026-azure": "5.19.0-1026.29~22.04.1",
            "linux-modules-5.19.0-1026-azure": "5.19.0-1026.29~22.04.1",
            "linux-tools-azure-edge": "5.19.0.1026.29~22.04.1",
            "linux-cloud-tools-azure-edge": "5.19.0.1026.29~22.04.1",
            "linux-azure-5.19-headers-5.19.0-1026": "5.19.0-1026.29~22.04.1",
            "linux-image-5.19.0-1026-azure": "5.19.0-1026.29~22.04.1",
            "linux-headers-5.19.0-1026-azure": "5.19.0-1026.29~22.04.1",
            "linux-image-azure-edge": "5.19.0.1026.29~22.04.1",
            "linux-azure-5.19-tools-5.19.0-1026": "5.19.0-1026.29~22.04.1",
            "linux-buildinfo-5.19.0-1026-azure": "5.19.0-1026.29~22.04.1"
        }
    ]
}