Summary
Seth Jenkins discovered that the Linux kernel did not properly perform
address randomization for a per-cpu memory management structure. A local
attacker could use this to expose sensitive information (kernel memory) or
in conjunction with another kernel vulnerability. (CVE-2023-0597)
Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in
the Linux kernel contained a race condition, leading to a null pointer
dereference vulnerability. A local attacker could use this to cause a
denial of service (system crash). (CVE-2023-31083)
Lin Ma discovered that the Netlink Transformation (XFRM) subsystem in the
Linux kernel contained a null pointer dereference vulnerability in some
situations. A local privileged attacker could use this to cause a denial of
service (system crash). (CVE-2023-3772)
It was discovered that the Siano USB MDTV receiver device driver in the
Linux kernel did not properly handle device initialization failures in
certain situations, leading to a use-after-free vulnerability. A physically
proximate attacker could use this cause a denial of service (system crash).
(CVE-2023-4132)
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux | 5.4.0-166.183 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws | 5.4.0-1113.123 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure | 5.4.0-1119.126 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-bluefield | 5.4.0-1074.80 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gcp | 5.4.0-1117.126 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gkeop | 5.4.0-1080.84 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-ibm | 5.4.0-1060.65 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-kvm | 5.4.0-1102.108 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle | 5.4.0-1112.121 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-raspi | 5.4.0-1097.109 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-xilinx-zynqmp | 5.4.0-1033.37 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-aws-5.4 | 5.4.0-1113.123~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-azure-5.4 | 5.4.0-1119.126~18.04.2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-gcp-5.4 | 5.4.0-1117.126~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-hwe-5.4 | 5.4.0-166.183~18.04.2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-ibm-5.4 | 5.4.0-1060.65~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-oracle-5.4 | 5.4.0-1112.121~18.04.4 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-raspi-5.4 | 5.4.0-1097.109~18.04.2 |
Vulnerabilities 4
-
Medium 5.5
A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the…
-
Medium 5.5
Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel …
-
Medium 5.5
Kernel: smsusb: use-after-free caused by do_submit_urb()
A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition.
-
Unscored —
An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a rac…