Skip to content
OpenAdvisories
High USN-6741-1 5 CVEs

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

Published Apr 19, 2024 · Updated Oct 22, 2026

Ecosystem: Ubuntu

Summary

Daniele Antonioli discovered that the Secure Simple Pairing and Secure
Connections pairing in the Bluetooth protocol could allow an
unauthenticated user to complete authentication without pairing
credentials. A physically proximate attacker placed between two Bluetooth
devices could use this to subsequently impersonate one of the paired
devices. (CVE-2023-24023)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- JFS file system;
- BPF subsystem;
- Netfilter;
(CVE-2023-52603, CVE-2023-52600, CVE-2024-26581, CVE-2024-26589)

Fixed packages 19

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS linux 5.4.0-177.197
Ubuntu · 20.04 LTS 20.04:LTS linux-aws 5.4.0-1123.133
Ubuntu · 20.04 LTS 20.04:LTS linux-azure 5.4.0-1128.135
Ubuntu · 20.04 LTS 20.04:LTS linux-bluefield 5.4.0-1083.90
Ubuntu · 20.04 LTS 20.04:LTS linux-gcp 5.4.0-1127.136
Ubuntu · 20.04 LTS 20.04:LTS linux-gkeop 5.4.0-1090.94
Ubuntu · 20.04 LTS 20.04:LTS linux-ibm 5.4.0-1070.75
Ubuntu · 20.04 LTS 20.04:LTS linux-iot 5.4.0-1035.36
Ubuntu · 20.04 LTS 20.04:LTS linux-kvm 5.4.0-1111.118
Ubuntu · 20.04 LTS 20.04:LTS linux-oracle 5.4.0-1122.131
Ubuntu · 20.04 LTS 20.04:LTS linux-raspi 5.4.0-1107.119
Ubuntu · 20.04 LTS 20.04:LTS linux-xilinx-zynqmp 5.4.0-1042.46
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-aws-5.4 5.4.0-1123.133~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-azure-5.4 5.4.0-1128.135~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-gcp-5.4 5.4.0-1127.136~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-hwe-5.4 5.4.0-177.197~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-ibm-5.4 5.4.0-1070.75~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-oracle-5.4 5.4.0-1122.131~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-raspi-5.4 5.4.0-1107.119~18.04.1

Vulnerabilities 5

  • High 7.8
    CVE-2023-52600

    jfs: fix uaf in jfs_evict_inode

    In the Linux kernel, the following vulnerability has been resolved: jfs: fix uaf in jfs_evict_inode When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs wh…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-52603

    UBSAN: array-index-out-of-bounds in dtSplitRoot

    In the Linux kernel, the following vulnerability has been resolved: UBSAN: array-index-out-of-bounds in dtSplitRoot Syzkaller reported the following issue: oop0: detected capacity change from 0 to 32768 UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:1…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26581 Public exploit

    netfilter: nft_set_rbtree: skip end interval element from gc

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval el…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-26589

    bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS

    In the Linux kernel, the following vulnerability has been resolved: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS For PTR_TO_FLOW_KEYS, check_flow_keys_access() only uses fixed off for validation. However, variable offset ptr alu is not prohibited for t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.4
    CVE-2023-24023

    Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-24023
  • report
    https://ubuntu.com/security/CVE-2023-52600
  • report
    https://ubuntu.com/security/CVE-2023-52603
  • report
    https://ubuntu.com/security/CVE-2024-26581
  • report
    https://ubuntu.com/security/CVE-2024-26589