Summary
Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii
Oleksenko discovered that some AMD processors could leak stale data from
division operations in certain situations. A local attacker could possibly
use this to expose sensitive information. (CVE-2023-20588)
It was discovered that the bluetooth subsystem in the Linux kernel did not
properly handle L2CAP socket release, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-40283)
It was discovered that some network classifier implementations in the Linux
kernel contained use-after-free vulnerabilities. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2023-4128)
Lonial Con discovered that the netfilter subsystem in the Linux kernel
contained a memory leak when handling certain element flush operations. A
local attacker could use this to expose sensitive information (kernel
memory). (CVE-2023-4569)
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws-5.15 | 5.15.0-1045.50~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure-5.15 | 5.15.0-1047.54~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure-fde-5.15 | 5.15.0-1047.54~20.04.1.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gcp-5.15 | 5.15.0-1042.50~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gkeop-5.15 | 5.15.0-1028.33~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-hwe-5.15 | 5.15.0-84.93~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-ibm-5.15 | 5.15.0-1038.41~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-lowlatency-hwe-5.15 | 5.15.0-84.93~20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux | 5.15.0-84.93 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-aws | 5.15.0-1045.50 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-azure | 5.15.0-1047.54 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-azure-fde | 5.15.0-1047.54.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gcp | 5.15.0-1042.50 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gke | 5.15.0-1042.47 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gkeop | 5.15.0-1028.33 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-ibm | 5.15.0-1038.41 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-kvm | 5.15.0-1042.47 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-lowlatency | 5.15.0-84.93 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-nvidia | 5.15.0-1033.33 |
Vulnerabilities 4
-
High 7.8
An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is…
-
Medium 5.5
Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c
A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.
-
Unscored —CVE-2023-20588 EPSS 11%
Speculative Leaks
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.
-
Unscored —
** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record i…