Skip to content
OpenAdvisories
High USN-6776-1 4 CVEs

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

Published May 16, 2024 · Updated Oct 22, 2026

Ecosystem: Ubuntu

Summary

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Networking core;
- IPv4 networking;
- MAC80211 subsystem;
- Tomoyo security module;
(CVE-2024-26614, CVE-2023-52530, CVE-2024-26622)

Fixed packages 19

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS linux 5.4.0-182.202
Ubuntu · 20.04 LTS 20.04:LTS linux-aws 5.4.0-1125.135
Ubuntu · 20.04 LTS 20.04:LTS linux-azure 5.4.0-1130.137
Ubuntu · 20.04 LTS 20.04:LTS linux-bluefield 5.4.0-1085.92
Ubuntu · 20.04 LTS 20.04:LTS linux-gcp 5.4.0-1129.138
Ubuntu · 20.04 LTS 20.04:LTS linux-gkeop 5.4.0-1092.96
Ubuntu · 20.04 LTS 20.04:LTS linux-ibm 5.4.0-1072.77
Ubuntu · 20.04 LTS 20.04:LTS linux-iot 5.4.0-1037.38
Ubuntu · 20.04 LTS 20.04:LTS linux-kvm 5.4.0-1113.120
Ubuntu · 20.04 LTS 20.04:LTS linux-oracle 5.4.0-1124.133
Ubuntu · 20.04 LTS 20.04:LTS linux-raspi 5.4.0-1109.121
Ubuntu · 20.04 LTS 20.04:LTS linux-xilinx-zynqmp 5.4.0-1044.48
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-aws-5.4 5.4.0-1125.135~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-azure-5.4 5.4.0-1130.137~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-gcp-5.4 5.4.0-1129.138~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-hwe-5.4 5.4.0-182.202~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-ibm-5.4 5.4.0-1072.77~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-oracle-5.4 5.4.0-1124.133~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-raspi-5.4 5.4.0-1109.121~18.04.1

Vulnerabilities 4

  • High 8.8
    CVE-2023-52530

    wifi: mac80211: fix potential key use-after-free

    In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_link() is called by ieee80211_gtk_rekey_add() but returns 0 due to KRACK protection (identical key reinstall), ieee80211_gt…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26614

    tcp: make sure init the accept_queue's spinlocks once

    In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the accept_queue's spinlocks once When I run syz's reproduction C program locally, it causes the following issue: pvqspinlock: lock 0xffff9d181cd5c660 has corrupted value …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.3
    CVE-2023-47233

    The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unp…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-26622

    tomoyo: fix UAF write bug in tomoyo_write_control()

    In the Linux kernel, the following vulnerability has been resolved: tomoyo: fix UAF write bug in tomoyo_write_control() Since tomoyo_write_control() updates head->write_buf when write() of long lines is requested, we need to fetch head->write_buf after head->…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-47233
  • report
    https://ubuntu.com/security/CVE-2023-52530
  • report
    https://ubuntu.com/security/CVE-2024-26614
  • report
    https://ubuntu.com/security/CVE-2024-26622