Skip to content
OpenAdvisories
High USN-6742-1 4 CVEs

linux, linux-aws, linux-aws-5.15, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

Published Apr 19, 2024 · Updated Oct 22, 2026

Ecosystem: Ubuntu

Summary

Daniele Antonioli discovered that the Secure Simple Pairing and Secure
Connections pairing in the Bluetooth protocol could allow an
unauthenticated user to complete authentication without pairing
credentials. A physically proximate attacker placed between two Bluetooth
devices could use this to subsequently impersonate one of the paired
devices. (CVE-2023-24023)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- JFS file system;
- Netfilter;
(CVE-2024-26581, CVE-2023-52600, CVE-2023-52603)

Fixed packages 21

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS linux-aws-5.15 5.15.0-1058.64~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-azure-5.15 5.15.0-1061.70~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-azure-fde-5.15 5.15.0-1061.70~20.04.1.1
Ubuntu · 20.04 LTS 20.04:LTS linux-gcp-5.15 5.15.0-1058.66~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-gkeop-5.15 5.15.0-1043.50~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-hwe-5.15 5.15.0-105.115~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-ibm-5.15 5.15.0-1053.56~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-intel-iotg-5.15 5.15.0-1055.61~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-105.115~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-oracle-5.15 5.15.0-1058.64~20.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux 5.15.0-105.115
Ubuntu · 22.04 LTS 22.04:LTS linux-aws 5.15.0-1060.66
Ubuntu · 22.04 LTS 22.04:LTS linux-azure-fde 5.15.0-1061.70.1
Ubuntu · 22.04 LTS 22.04:LTS linux-gcp 5.15.0-1058.66
Ubuntu · 22.04 LTS 22.04:LTS linux-gke 5.15.0-1057.62
Ubuntu · 22.04 LTS 22.04:LTS linux-gkeop 5.15.0-1043.50
Ubuntu · 22.04 LTS 22.04:LTS linux-ibm 5.15.0-1053.56
Ubuntu · 22.04 LTS 22.04:LTS linux-intel-iotg 5.15.0-1055.61
Ubuntu · 22.04 LTS 22.04:LTS linux-kvm 5.15.0-1057.62
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle 5.15.0-1058.64
Ubuntu · 22.04 LTS 22.04:LTS linux-raspi 5.15.0-1053.56

Vulnerabilities 4

  • High 7.8
    CVE-2023-52600

    jfs: fix uaf in jfs_evict_inode

    In the Linux kernel, the following vulnerability has been resolved: jfs: fix uaf in jfs_evict_inode When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs wh…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-52603

    UBSAN: array-index-out-of-bounds in dtSplitRoot

    In the Linux kernel, the following vulnerability has been resolved: UBSAN: array-index-out-of-bounds in dtSplitRoot Syzkaller reported the following issue: oop0: detected capacity change from 0 to 32768 UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:1…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26581 Public exploit

    netfilter: nft_set_rbtree: skip end interval element from gc

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval el…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 6.4
    CVE-2023-24023

    Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-24023
  • report
    https://ubuntu.com/security/CVE-2023-52600
  • report
    https://ubuntu.com/security/CVE-2023-52603
  • report
    https://ubuntu.com/security/CVE-2024-26581