Summary
Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii
Oleksenko discovered that some AMD processors could leak stale data from
division operations in certain situations. A local attacker could possibly
use this to expose sensitive information. (CVE-2023-20588)
It was discovered that the ARM64 KVM implementation in the Linux kernel did
not properly restrict hypervisor memory access. An attacker in a guest VM
could use this to execute arbitrary code in the host OS. (CVE-2023-21264)
It was discovered that the bluetooth subsystem in the Linux kernel did not
properly handle L2CAP socket release, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-40283)
It was discovered that some network classifier implementations in the Linux
kernel contained use-after-free vulnerabilities. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2023-4128)
Lonial Con discovered that the netfilter subsystem in the Linux kernel
contained a memory leak when handling certain element flush operations. A
local attacker could use this to expose sensitive information (kernel
memory). (CVE-2023-4569)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | linux-aws-6.2 | 6.2.0-1012.12~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-azure-6.2 | 6.2.0-1012.12~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-azure-fde-6.2 | 6.2.0-1012.12~22.04.1.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gcp-6.2 | 6.2.0-1014.14~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-hwe-6.2 | 6.2.0-33.33~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-lowlatency-hwe-6.2 | 6.2.0-1013.13~22.04.1 |
Vulnerabilities 5
-
High 7.8
An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is…
-
Medium 5.5
Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c
A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.
-
Unscored —CVE-2023-20588 EPSS 11%
Speculative Leaks
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.
-
Unscored —
In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access chec…
-
Unscored —
** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record i…