Summary
Marek Marczykowski-Górecki discovered that the Xen event channel
infrastructure implementation in the Linux kernel contained a race
condition. An attacker in a guest VM could possibly use this to cause a
denial of service (paravirtualized device unavailability). (CVE-2023-34324)
Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver
in the Linux kernel during device removal. A privileged attacker could use
this to cause a denial of service (system crash). (CVE-2023-35827)
It was discovered that a race condition existed in the Linux kernel when
performing operations with kernel objects, leading to an out-of-bounds
write. A local attacker could use this to cause a denial of service (system
crash) or execute arbitrary code. (CVE-2023-45863)
黄思聪 discovered that the NFC Controller Interface (NCI) implementation in
the Linux kernel did not properly handle certain memory allocation failure
conditions, leading to a null pointer dereference vulnerability. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2023-46343)
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux | 5.4.0-171.189 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws | 5.4.0-1118.128 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure | 5.4.0-1123.130 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-bluefield | 5.4.0-1078.84 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gkeop | 5.4.0-1085.89 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-ibm | 5.4.0-1065.70 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-iot | 5.4.0-1030.31 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-kvm | 5.4.0-1106.113 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle | 5.4.0-1117.126 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-xilinx-zynqmp | 5.4.0-1037.41 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-aws-5.4 | 5.4.0-1118.128~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-azure-5.4 | 5.4.0-1123.130~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-hwe-5.4 | 5.4.0-171.189~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-ibm-5.4 | 5.4.0-1065.70~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-oracle-5.4 | 5.4.0-1117.126~18.04.1 |
Vulnerabilities 4
-
Medium 5.5
In the Linux kernel before 6.5.9, there is a NULL pointer dereference in send_acknowledge in net/nfc/nci/spi.c.
-
Medium 4.9
Possible deadlock in Linux kernel event handling
Closing of an event channel in the Linux kernel can result in a deadlock. This happens when the close is being performed in parallel to an unrelated Xen console action and the handling of a Xen console interrupt in an unprivileged guest. The closing of an eve…
-
Unscored —
An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/eth…
-
Unscored —
An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a …