Summary
Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in
the Linux kernel contained a race condition, leading to a null pointer
dereference vulnerability. A local attacker could use this to cause a
denial of service (system crash). (CVE-2023-31083)
Lin Ma discovered that the Netlink Transformation (XFRM) subsystem in the
Linux kernel contained a null pointer dereference vulnerability in some
situations. A local privileged attacker could use this to cause a denial of
service (system crash). (CVE-2023-3772)
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws-5.15 | 5.15.0-1049.54~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure-5.15 | 5.15.0-1051.59~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure-fde-5.15 | 5.15.0-1051.59~20.04.1.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gcp-5.15 | 5.15.0-1046.54~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gkeop-5.15 | 5.15.0-1032.38~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-hwe-5.15 | 5.15.0-88.98~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-ibm-5.15 | 5.15.0-1042.45~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-lowlatency-hwe-5.15 | 5.15.0-88.98~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle-5.15 | 5.15.0-1047.53~20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux | 5.15.0-88.98 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-aws | 5.15.0-1049.54 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-azure | 5.15.0-1051.59 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-azure-fde | 5.15.0-1051.59.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gcp | 5.15.0-1046.54 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gkeop | 5.15.0-1032.38 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-ibm | 5.15.0-1042.45 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-kvm | 5.15.0-1046.51 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-lowlatency | 5.15.0-88.98 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-nvidia | 5.15.0-1040.40 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-oracle | 5.15.0-1047.53 |
Vulnerabilities 2
-
Medium 5.5
Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel …
-
Unscored —
An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a rac…