Summary
Lin Ma discovered that the netfilter subsystem in the Linux kernel did not
properly validate network family support while creating a new netfilter
table. A local attacker could use this to cause a denial of service or
possibly execute arbitrary code. (CVE-2023-6040)
It was discovered that the CIFS network file system implementation in the
Linux kernel did not properly validate the server frame size in certain
situation, leading to an out-of-bounds read vulnerability. An attacker
could use this to construct a malicious CIFS image that, when operated on,
could cause a denial of service (system crash) or possibly expose sensitive
information. (CVE-2023-6606)
Budimir Markovic, Lucas De Marchi, and Pengfei Xu discovered that the perf
subsystem in the Linux kernel did not properly validate all event sizes
when attaching new events, leading to an out-of-bounds write vulnerability.
A local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2023-6931)
It was discovered that the IGMP protocol implementation in the Linux kernel
contained a race condition, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2023-6932)
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux | 5.4.0-170.188 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws | 5.4.0-1117.127 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure | 5.4.0-1122.129 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-bluefield | 5.4.0-1077.83 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gcp | 5.4.0-1121.130 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gkeop | 5.4.0-1084.88 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-ibm | 5.4.0-1064.69 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-iot | 5.4.0-1029.30 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle | 5.4.0-1116.125 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-raspi | 5.4.0-1101.113 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-xilinx-zynqmp | 5.4.0-1036.40 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-aws-5.4 | 5.4.0-1117.127~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-azure-5.4 | 5.4.0-1122.129~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-gcp-5.4 | 5.4.0-1121.130~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-hwe-5.4 | 5.4.0-170.188~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-ibm-5.4 | 5.4.0-1064.69~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-oracle-5.4 | 5.4.0-1116.125~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-raspi-5.4 | 5.4.0-1101.113~18.04.1 |
Vulnerabilities 4
-
High 7.8
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) valu…
-
High 7.8CVE-2023-6931 Public exploit
Out-of-bounds write in Linux kernel's Performance Events system component
A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_…
-
High 7.8
Use-after-free in Linux kernel's ipv4: igmp component
A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another…
-
High 7.1
Kernel: out-of-bounds read vulnerability in smbcalcsize
An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.