Skip to content
OpenAdvisories
High USN-6775-1 3 CVEs

linux, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-raspi vulnerabilities

Published May 16, 2024 · Updated Oct 22, 2026

Ecosystem: Ubuntu

Summary

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- MAC80211 subsystem;
- Tomoyo security module;
(CVE-2024-26622, CVE-2023-52530)

Fixed packages 18

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS linux-azure-5.15 5.15.0-1064.73~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-azure-fde-5.15 5.15.0-1064.73~20.04.1.1
Ubuntu · 20.04 LTS 20.04:LTS linux-gcp-5.15 5.15.0-1060.68~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-gkeop-5.15 5.15.0-1045.52~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-hwe-5.15 5.15.0-107.117~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-ibm-5.15 5.15.0-1055.58~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-107.117~20.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux 5.15.0-107.117
Ubuntu · 22.04 LTS 22.04:LTS linux-azure 5.15.0-1064.73
Ubuntu · 22.04 LTS 22.04:LTS linux-azure-fde 5.15.0-1064.73.1
Ubuntu · 22.04 LTS 22.04:LTS linux-gcp 5.15.0-1060.68
Ubuntu · 22.04 LTS 22.04:LTS linux-gkeop 5.15.0-1045.52
Ubuntu · 22.04 LTS 22.04:LTS linux-ibm 5.15.0-1055.58
Ubuntu · 22.04 LTS 22.04:LTS linux-kvm 5.15.0-1059.64
Ubuntu · 22.04 LTS 22.04:LTS linux-lowlatency 5.15.0-107.117
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia 5.15.0-1055.56
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle 5.15.0-1060.66
Ubuntu · 22.04 LTS 22.04:LTS linux-raspi 5.15.0-1055.58

Vulnerabilities 3

  • High 8.8
    CVE-2023-52530

    wifi: mac80211: fix potential key use-after-free

    In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_link() is called by ieee80211_gtk_rekey_add() but returns 0 due to KRACK protection (identical key reinstall), ieee80211_gt…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.3
    CVE-2023-47233

    The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unp…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-26622

    tomoyo: fix UAF write bug in tomoyo_write_control()

    In the Linux kernel, the following vulnerability has been resolved: tomoyo: fix UAF write bug in tomoyo_write_control() Since tomoyo_write_control() updates head->write_buf when write() of long lines is requested, we need to fetch head->write_buf after head->…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-47233
  • report
    https://ubuntu.com/security/CVE-2023-52530
  • report
    https://ubuntu.com/security/CVE-2024-26622