Kernel Live Patch Security Notice

Summary

Fixed packages 39

Vulnerabilities 6

• High 7.8
  CVE-2024-1086 Exploited · Ransomware Public exploit EPSS 28%

  Use-after-free in Linux kernel's netfilter: nf_tables component

  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slo…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jan 31, 2024

  KEV May 30, 2024
• High 7.8
  CVE-2023-1872

  Use-after-free in Linux kernel's io_uring subsystem

  A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation. The io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race conditi…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 12, 2023
• High 7.0
  CVE-2024-0646

  Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

  An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privile…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Jan 17, 2024
• Medium 5.5
  CVE-2023-4569

  Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c

  A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.

  Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  Aug 28, 2023
• Medium 4.7
  CVE-2023-6176

  Kernel: local dos vulnerability in scatterwalk_copychunks

  A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to cras…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Nov 16, 2023
• Unscored —
  CVE-2023-51781

  An issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has a use-after-free becau…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 25, 2023

References

• report
  https://ubuntu.com/security/CVE-2023-1872
• report
  https://ubuntu.com/security/CVE-2023-4569
• report
  https://ubuntu.com/security/CVE-2023-6176
• report
  https://ubuntu.com/security/CVE-2023-51781
• report
  https://ubuntu.com/security/CVE-2024-0646
• report
  https://ubuntu.com/security/CVE-2024-1086