USN-5876-1: Linux kernel vulnerabilities<\/p>\n
It was discovered that a memory leak existed in the Unix domain socket
\nimplementation of the Linux kernel. A local attacker could use this to
\ncause a denial of service (memory exhaustion). (CVE-2022-3543)<\/p>\n
It was discovered that the Bluetooth HCI implementation in the Linux kernel
\ndid not properly deallocate memory in some situations. An attacker could
\npossibly use this cause a denial of service (memory exhaustion).
\n(CVE-2022-3619)<\/p>\n
It was discovered that the hugetlb implementation in the Linux kernel
\ncontained a race condition in some situations. A local attacker could use
\nthis to cause a denial of service (system crash) or expose sensitive
\ninformation (kernel memory). (CVE-2022-3623)<\/p>\n
It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux
\nkernel did not properly perform bounds checking in some situations. A
\nphysically proximate attacker could use this to craft a malicious USB
\ndevice that when inserted, could cause a denial of service (system crash)
\nor possibly execute arbitrary code. (CVE-2022-3628)<\/p>\n
It was discovered that a use-after-free vulnerability existed in the
\nBluetooth stack in the Linux kernel. A local attacker could use this to
\ncause a denial of service (system crash) or possibly execute arbitrary
\ncode. (CVE-2022-3640)<\/p>\n
It was discovered that a race condition existed in the SMSC UFX USB driver
\nimplementation in the Linux kernel, leading to a use-after-free
\nvulnerability. A physically proximate attacker could use this to cause a
\ndenial of service (system crash) or possibly execute arbitrary code.
\n(CVE-2022-41849)<\/p>\n
It was discovered that a race condition existed in the Roccat HID driver in
\nthe Linux kernel, leading to a use-after-free vulnerability. A local
\nattacker could use this to cause a denial of service (system crash) or
\npossibly execute arbitrary code. (CVE-2022-41850)<\/p>\n
Tam\u00e1s Koczka discovered that the Bluetooth L2CAP implementation in the
\nLinux kernel did not properly initialize memory in some situations. A
\nphysically proximate attacker could possibly use this to expose sensitive
\ninformation (kernel memory). (CVE-2022-42895)<\/p>\n
Arnaud Gatignol, Quentin Minster, Florent Saudel and Guillaume Teissier
\ndiscovered that the KSMBD implementation in the Linux kernel did not
\nproperly validate user-supplied data in some situations. An authenticated
\nattacker could use this to cause a denial of service (system crash), expose
\nsensitive information (kernel memory) or possibly execute arbitrary code.
\n(CVE-2022-47940)<\/p>\n
It was discovered that a race condition existed in the qdisc implementation USN-5876-1: Linux kernel vulnerabilities It was discovered that a memory leak existed in the Unix domain socket implementation of the Linux kernel. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3543) It was discovered that the Bluetooth HCI implementation in the Linux kernel did not properly deallocate memory in some situations. An attacker could possibly use this cause a denial of service (memory exhaustion). (CVE-2022-3619) It was discovered that the hugetlb implementation in the Linux kernel contained a race condition in some situations. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information (kernel memory). (CVE-2022-3623) It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did not properly perform bounds checking in some situations. A physically proximate attacker could use this [ more… ]<\/a><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[586],"tags":[587],"class_list":["post-50080","post","type-post","status-publish","format-standard","hentry","category-ubuntu-usn","tag-ubuntu-usn"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/50080","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/comments?post=50080"}],"version-history":[{"count":1,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/50080\/revisions"}],"predecessor-version":[{"id":50081,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/50080\/revisions\/50081"}],"wp:attachment":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/media?parent=50080"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/categories?post=50080"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/tags?post=50080"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nin the Linux kernel, leading to a use-after-free vulnerability. A local
\nattacker could use this to cause a denial of service (system crash) or
\npossibly execute arbitrary code. (CVE-2023-0590)
\nSource: USN-5876-1: Linux kernel vulnerabilities<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"