Skip to content
OpenAdvisories
High LSN-0100-1 5 CVEs

Kernel Live Patch Security Notice

Published Feb 7, 2024 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the SMB network file sharing protocol implementation
in the Linux kernel did not properly handle certain error conditions,
leading to a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code.(CVE-2023-5345)

Lin Ma discovered that the netfilter subsystem in the Linux kernel did not
properly validate network family support while creating a new netfilter
table. A local attacker could use this to cause a denial of service or
possibly execute arbitrary code.(CVE-2023-6040)

It was discovered that the TLS subsystem in the Linux kernel did not
properly perform cryptographic operations in some situations, leading to a
null pointer dereference vulnerability. A local attacker could use this to
cause a denial of service (system crash) or possibly execute arbitrary
code.(CVE-2023-6176)

Xingyuan Mo discovered that the netfilter subsystem in the Linux kernel did
not properly handle inactive elements in its PIPAPO data structure, leading
to a use-after-free vulnerability. A local attacker could use this to cause
a denial of service (system crash) or possibly execute arbitrary code.(CVE-2023-6817)

It was discovered that the IGMP protocol implementation in the Linux kernel
contained a race condition, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code.(CVE-2023-6932)

Fixed packages 38

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-lts-xenial 4.4.0-250.284~14.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux 4.4.0-250.284
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-aws 4.4.0-1165.180
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-aws-hwe 4.15.0-1164.177~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-azure 4.15.0-1173.188~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-gcp 4.15.0-1158.175~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-hwe 4.15.0-221.232~16.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux 4.15.0-221.232
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-aws 4.15.0-1164.177
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-aws-5.4 5.4.0-1117.127~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-azure-4.15 4.15.0-1173.188
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-azure-5.4 5.4.0-1122.129~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-gcp-4.15 4.15.0-1158.175
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-gcp-5.4 5.4.0-1121.130~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-hwe-5.4 5.4.0-170.188~18.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux 5.4.0-170.188
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-aws 5.4.0-1117.127
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-aws-5.15 5.15.0-1053.58~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-azure 5.4.0-1122.129
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gcp 5.4.0-1121.130
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gcp-5.15 5.15.0-1051.59~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gke —
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gke-5.15 —
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gkeop 5.4.0-1084.88
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-hwe-5.15 5.15.0-94.104~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm 5.4.0-1064.69
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm-5.15 5.15.0-1046.49~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-94.104~20.04.1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux 5.15.0-94.104
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-aws 5.15.0-1053.58
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-aws-6.2 6.2.0-1018.18~22.04.1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-azure 5.15.0-1056.64
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-azure-6.2 6.2.0-1019.19~22.04.1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-gcp 5.15.0-1051.59
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-gcp-6.2 6.2.0-1021.23~22.04.1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-gke 5.15.0-1050.55
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-hwe-6.2 6.2.0-37.38~22.04.1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-ibm 5.15.0-1046.49

Vulnerabilities 5

  • High 7.8
    CVE-2023-5345

    Use-after-free in Linux kernel's fs/smb/client component

    A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation. In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-6040

    An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)

    An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) valu…

    The Linux Kernel Organization linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-6817

    Use-after-free in Linux kernel's netfilter: nf_tables component

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PI…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-6932

    Use-after-free in Linux kernel's ipv4: igmp component

    A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 4.7
    CVE-2023-6176

    Kernel: local dos vulnerability in scatterwalk_copychunks

    A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to cras…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-5345
  • report
    https://ubuntu.com/security/CVE-2023-6040
  • report
    https://ubuntu.com/security/CVE-2023-6176
  • report
    https://ubuntu.com/security/CVE-2023-6817
  • report
    https://ubuntu.com/security/CVE-2023-6932