Linux Kernel: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 8

• High 7.8
  CVE-2023-1295

  Privilege escalation with IO_RING_OP_CLOSE in the Linux Kernel

  A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in the Linux kernel's versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 28, 2023
• High 7.8
  CVE-2023-3090

  Out-of-bounds write in Linux kernel's ipvlan network driver

  A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is r…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 28, 2023
• High 7.8
  CVE-2023-3389

  Use after free in io_uring in the Linux Kernel

  A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer. We recommend upgrading past commit ef7dfac5…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 28, 2023
• High 7.8
  CVE-2023-3390 Public exploit

  Use-after-free in Linux kernel's netfilter subsystem

  A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vu…

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 28, 2023
• Medium 5.5
  CVE-2023-3357

  A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local us…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jun 28, 2023
• Medium 5.5
  CVE-2023-3358

  A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jun 28, 2023
• Medium 5.5
  CVE-2023-3359

  An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Jun 28, 2023
• Medium 4.7
  CVE-2023-3439

  A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevan…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu Azure Linux
  Jun 28, 2023

Revision history

1. 2024-07-18 #56

   Neue Updates von Dell aufgenommen

2. 2024-07-01 #55

   Neue Updates von Amazon aufgenommen

3. 2024-03-13 #54

   Neue Updates von Red Hat aufgenommen

4. 2024-03-12 #53

   Neue Updates von Red Hat aufgenommen

5. 2024-03-11 #52

   Neue Updates von Red Hat aufgenommen

6. 2024-02-12 #51

   Neue Updates von Oracle Linux aufgenommen

7. 2024-01-18 #50

   Neue Updates von Oracle Linux aufgenommen

8. 2024-01-11 #49

   Neue Updates von Debian aufgenommen

9. 2023-11-07 #48

   Neue Updates von Red Hat aufgenommen

10. 2023-10-31 #47

    Neue Updates von SUSE aufgenommen

11. 2023-10-30 #46

    Neue Updates von SUSE aufgenommen

12. 2023-10-26 #45

    Neue Updates von SUSE aufgenommen

13. 2023-10-25 #44

    Neue Updates von SUSE aufgenommen

14. 2023-10-24 #43

    Neue Updates von SUSE aufgenommen

15. 2023-10-19 #42

    Neue Updates von Debian aufgenommen

16. 2023-10-10 #41

    Neue Updates von Red Hat und Ubuntu aufgenommen

17. 2023-10-01 #40

    Neue Updates von Oracle Linux aufgenommen

18. 2023-09-25 #39

    Neue Updates von Amazon aufgenommen

19. 2023-09-20 #38

    Neue Updates von Oracle Linux aufgenommen

20. 2023-09-19 #37

    Neue Updates von Red Hat und SUSE aufgenommen

21. 2023-09-18 #36

    Neue Updates von SUSE aufgenommen

22. 2023-09-17 #35

    Neue Updates von SUSE und Oracle Linux aufgenommen

23. 2023-09-14 #34

    Neue Updates von SUSE aufgenommen

24. 2023-09-13 #33

    Neue Updates von SUSE aufgenommen

25. 2023-09-12 #32

    Neue Updates von Red Hat aufgenommen

References

• Oracle Linux Security Advisory ELSA-2024-12150 vom 2024-02-13
  https://linux.oracle.com/errata/ELSA-2024-12150.html
• Red Hat Security Advisory RHSA-2024:1278 vom 2024-03-12
  https://access.redhat.com/errata/RHSA-2024:1278
• Debian Security Advisory DLA-3710 vom 2024-01-11
  https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
• Red Hat Security Advisory RHSA-2024:1250 vom 2024-03-12
  https://access.redhat.com/errata/RHSA-2024:1250
• Red Hat Security Advisory RHSA-2024:1253 vom 2024-03-12
  https://access.redhat.com/errata/RHSA-2024:1253
• Github Advisory Database vom 2023-06-28
  https://github.com/advisories/GHSA-295v-9m5g-79q9
• Github Advisory Database vom 2023-06-28
  https://github.com/advisories/GHSA-3gcx-wjr4-jv32
• Github Advisory Database vom 2023-06-28
  https://github.com/advisories/GHSA-8r8v-fx37-wpw7
• Github Advisory Database vom 2023-06-28
  https://github.com/advisories/GHSA-9787-f568-7rr2
• Github Advisory Database vom 2023-06-28
  https://github.com/advisories/GHSA-hg6h-cj3j-wp77
• Github Advisory Database vom 2023-06-28
  https://github.com/advisories/GHSA-rmg8-h2h6-5wwf
• Github Advisory Database vom 2023-06-28
  https://github.com/advisories/GHSA-vj8j-762w-6jmv
• Github Advisory Database vom 2023-06-28
  https://github.com/advisories/GHSA-wh7q-2hgq-2xj7
• Debian Security Advisory DSA-5448 vom 2023-07-06
  https://www.debian.org/security/2023/dsa-5448
• SUSE Security Update SUSE-SU-2023:2804-1 vom 2023-07-10
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015467.html
• SUSE Security Update SUSE-SU-2023:2803-1 vom 2023-07-10
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015466.html
• SUSE Security Update SUSE-SU-2023:2805-1 vom 2023-07-11
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015468.html
• SUSE Security Update SUSE-SU-2023:2809-1 vom 2023-07-11
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015470.html
• SUSE Security Update SUSE-SU-2023:2808-1 vom 2023-07-11
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015471.html
• SUSE Security Update SUSE-SU-2023:2810-1 vom 2023-07-12
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015472.html
• SUSE Security Update SUSE-SU-2023:2820-1 vom 2023-07-13
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015477.html
• SUSE Security Update SUSE-SU-2023:2831-1 vom 2023-07-14
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015492.html
• SUSE Security Update SUSE-SU-2023:2834-1 vom 2023-07-14
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015496.html
• Ubuntu Security Notice USN-6231-1 vom 2023-07-14
  https://ubuntu.com/security/notices/USN-6231-1
• SUSE Security Update SUSE-SU-2023:2830-1 vom 2023-07-14
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015491.html
• SUSE Security Update SUSE-SU-2023:2822-1 vom 2023-07-14
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015490.html
• SUSE Security Update SUSE-SU-2023:2859-1 vom 2023-07-17
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015512.html
• SUSE Security Update SUSE-SU-2023:2871-1 vom 2023-07-18
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015524.html
• SUSE Security Update SUSE-SU-2023:2892-1 vom 2023-07-19
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015533.html
• Amazon Linux Security Advisory ALAS2KERNEL-5.15-2023-024 vom 2023-07-20
  https://alas.aws.amazon.com/AL2/ALASKERNEL-5.15-2023-024.html
• Ubuntu Security Notice USN-6250-1 vom 2023-07-26
  https://ubuntu.com/security/notices/USN-6250-1
• Ubuntu Security Notice USN-6246-1 vom 2023-07-26
  https://ubuntu.com/security/notices/USN-6246-1
• Ubuntu Security Notice USN-6248-1 vom 2023-07-26
  https://ubuntu.com/security/notices/USN-6248-1
• Ubuntu Security Notice USN-6249-1 vom 2023-07-26
  https://ubuntu.com/security/notices/USN-6249-1
• Ubuntu Security Notice USN-6260-1 vom 2023-07-27
  https://ubuntu.com/security/notices/USN-6260-1
• Debian Security Advisory DLA-3508 vom 2023-07-27
  https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html
• Debian Security Advisory DSA-5461 vom 2023-07-30
  https://lists.debian.org/debian-security-announce/2023/msg00153.html
• Ubuntu Security Notice USN-6261-1 vom 2023-07-28
  https://ubuntu.com/security/notices/USN-6261-1
• Oracle Linux Security Advisory ELSA-2023-12688 vom 2023-08-01
  https://linux.oracle.com/errata/ELSA-2023-12688.html
• Red Hat Security Advisory RHSA-2023:4378 vom 2023-08-01
  https://access.redhat.com/errata/RHSA-2023:4378
• Red Hat Security Advisory RHSA-2023:4380 vom 2023-08-01
  https://access.redhat.com/errata/RHSA-2023:4380
• Red Hat Security Advisory RHSA-2023:4377 vom 2023-08-01
  https://access.redhat.com/errata/RHSA-2023:4377
• Debian Security Advisory DLA-3512 vom 2023-08-02
  https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html
• SUSE Security Update SUSE-SU-2023:3171-1 vom 2023-08-03
  https://lists.suse.com/pipermail/sle-security-updates/2023-August/015772.html
• SUSE Security Update SUSE-SU-2023:3172-1 vom 2023-08-03
  https://lists.suse.com/pipermail/sle-security-updates/2023-August/015771.html
• Oracle Linux Security Advisory ELSA-2023-4377 vom 2023-08-03
  https://linux.oracle.com/errata/ELSA-2023-4377.html
• SUSE Security Update SUSE-SU-2023:3180-1 vom 2023-08-03
  https://lists.suse.com/pipermail/sle-security-updates/2023-August/015780.html
• SUSE Security Update SUSE-SU-2023:3182-1 vom 2023-08-03
  https://lists.suse.com/pipermail/sle-security-updates/2023-August/015778.html
• Red Hat Security Advisory RHSA-2023:4515 vom 2023-08-08
  https://access.redhat.com/errata/RHSA-2023:4515
• Red Hat Security Advisory RHSA-2023:4516 vom 2023-08-08
  https://access.redhat.com/errata/RHSA-2023:4516
• ORACLE OVMSA-2023-0018 vom 2023-08-08
  https://oss.oracle.com/pipermail/el-errata/2023-August/014236.html
• Ubuntu Security Notice USN-6285-1 vom 2023-08-11
  https://ubuntu.com/security/notices/USN-6285-1
• SUSE Security Update SUSE-SU-2023:3302-1 vom 2023-08-14
  https://lists.suse.com/pipermail/sle-security-updates/2023-August/015894.html
• SUSE Security Update SUSE-SU-2023:3318-1 vom 2023-08-15
  https://lists.suse.com/pipermail/sle-security-updates/2023-August/015905.html
• Debian Security Advisory DSA-5480 vom 2023-08-18
  https://lists.debian.org/debian-security-announce/2023/msg00172.html
• SUSE Security Update SUSE-SU-2023:3391-1 vom 2023-08-23
  https://lists.suse.com/pipermail/sle-security-updates/2023-August/015999.html
• SUSE Security Update SUSE-SU-2023:3390-1 vom 2023-08-23
  https://lists.suse.com/pipermail/sle-security-updates/2023-August/015998.html
• Amazon Linux Security Advisory ALASLIVEPATCH-2023-141 vom 2023-08-23
  https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-141.html
• Amazon Linux Security Advisory ALASLIVEPATCH-2023-140 vom 2023-08-23
  https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-140.html
• Amazon Linux Security Advisory ALASLIVEPATCH-2023-139 vom 2023-08-23
  https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-139.html
• Amazon Linux Security Advisory ALASLIVEPATCH-2023-138 vom 2023-08-23
  https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-138.html
• Amazon Linux Security Advisory ALASLIVEPATCH-2023-137 vom 2023-08-23
  https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-137.html
• Amazon Linux Security Advisory ALASLIVEPATCH-2023-136 vom 2023-08-23
  https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-136.html
• Amazon Linux Security Advisory ALASLIVEPATCH-2023-135 vom 2023-08-24
  https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-135.html
• Amazon Linux Security Advisory ALASLIVEPATCH-2023-134 vom 2023-08-24
  https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-134.html
• SUSE Security Update SUSE-SU-2023:3421-1 vom 2023-08-24
  https://lists.suse.com/pipermail/sle-security-updates/2023-August/016021.html
• Red Hat Security Advisory RHSA-2023:4817 vom 2023-08-29
  https://access.redhat.com/errata/RHSA-2023:4817
• Red Hat Security Advisory RHSA-2023:4789 vom 2023-08-29
  https://access.redhat.com/errata/RHSA-2023:4789
• Red Hat Security Advisory RHSA-2023:4801 vom 2023-08-29
  https://access.redhat.com/errata/RHSA-2023:4801
• Red Hat Security Advisory RHSA-2023:4814 vom 2023-08-29
  https://access.redhat.com/errata/RHSA-2023:4814
• Red Hat Security Advisory RHSA-2023:4815 vom 2023-08-29
  https://access.redhat.com/errata/RHSA-2023:4815
• Red Hat Security Advisory RHSA-2023:4828 vom 2023-08-29
  https://access.redhat.com/errata/RHSA-2023:4828
• Red Hat Security Advisory RHSA-2023:4829 vom 2023-08-29
  https://access.redhat.com/errata/RHSA-2023:4829
• Red Hat Security Advisory RHSA-2023:4888 vom 2023-08-31
  https://access.redhat.com/errata/RHSA-2023:4888
• Red Hat Security Advisory RHSA-2023:4967 vom 2023-09-05
  https://access.redhat.com/errata/RHSA-2023:4967
• Red Hat Security Advisory RHSA-2023:4961 vom 2023-09-05
  https://access.redhat.com/errata/RHSA-2023:4961
• Red Hat Security Advisory RHSA-2023:4962 vom 2023-09-05
  https://access.redhat.com/errata/RHSA-2023:4962
• Amazon Linux Security Advisory ALAS2KERNEL-5.10-2023-039 vom 2023-09-07
  https://alas.aws.amazon.com/AL2/ALASKERNEL-5.10-2023-039.html
• SUSE Security Update SUSE-SU-2023:3571-1 vom 2023-09-11
  https://lists.suse.com/pipermail/sle-security-updates/2023-September/016129.html
• SUSE Security Update SUSE-SU-2023:3566-1 vom 2023-09-11
  https://lists.suse.com/pipermail/sle-security-updates/2023-September/016130.html