Summary
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um Informationen offenzulegen, Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuführen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 2
-
High 7.1
Use-after-free in parse_lease_state()
An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check …
-
High 7.0
Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222
A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privil…
Revision history
-
#3
Neue Updates von Ubuntu aufgenommen
-
#2
Neue Updates von Ubuntu aufgenommen
-
#1
Initiale Fassung
References
-
NIST Vulnerability Database vom 2023-11-02
https://nvd.nist.gov/vuln/detail/CVE-2023-1194
-
NIST Vulnerability Database vom 2023-11-02
https://nvd.nist.gov/vuln/detail/CVE-2023-1476
-
Ubuntu Security Notice USN-6725-1 vom 2024-04-09
https://ubuntu.com/security/notices/USN-6725-1
-
Ubuntu Security Notice USN-6725-2 vom 2024-04-16
https://ubuntu.com/security/notices/USN-6725-2