Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- Netfilter;
(CVE-2023-52664, CVE-2023-52927)
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws-5.15 | 5.15.0-1083.90~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-hwe-5.15 | 5.15.0-139.149~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-ibm-5.15 | 5.15.0-1075.78~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-intel-iotg-5.15 | 5.15.0-1078.84~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-lowlatency-hwe-5.15 | 5.15.0-139.149~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle-5.15 | 5.15.0-1080.86~20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux | 5.15.0-139.149 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-aws | 5.15.0-1083.90 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gcp | 5.15.0-1082.91 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gke | 5.15.0-1080.86 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gkeop | 5.15.0-1065.73 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-ibm | 5.15.0-1075.78 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-intel-iotg | 5.15.0-1078.84 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-kvm | 5.15.0-1079.84 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-lowlatency | 5.15.0-139.149 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-nvidia | 5.15.0-1077.78 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-nvidia-tegra | 5.15.0-1036.36 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1024.24 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-oracle | 5.15.0-1080.86 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-raspi | 5.15.0-1077.80 |
Vulnerabilities 2
-
High 7.8
net: atlantic: eliminate double free in error handling logic
In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic Driver has a logic leak in ring data allocation/free, where aq_ring_free could be called multiple times on same ring, if system is…
-
High 7.8CVE-2023-52927 Public exploit
netfilter: allow exp not to be removed in nf_ct_find_expectation
In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation Currently nf_conntrack_in() calling nf_ct_find_expectation() will remove the exp from the hash table. However, in some scenari…