USN-5875-1: Linux kernel (GKE) vulnerabilities<\/p>\n
It was discovered that the NFSD implementation in the Linux kernel did not
\nproperly handle some RPC messages, leading to a buffer overflow. A remote
\nattacker could use this to cause a denial of service (system crash) or
\npossibly execute arbitrary code. (CVE-2022-43945)<\/p>\n
Tam\u00e1s Koczka discovered that the Bluetooth L2CAP handshake implementation
\nin the Linux kernel contained multiple use-after-free vulnerabilities. A
\nphysically proximate attacker could use this to cause a denial of service
\n(system crash) or possibly execute arbitrary code. (CVE-2022-42896)<\/p>\n
It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux
\nkernel did not properly perform bounds checking in some situations. A
\nphysically proximate attacker could use this to craft a malicious USB
\ndevice that when inserted, could cause a denial of service (system crash)
\nor possibly execute arbitrary code. (CVE-2022-3628)<\/p>\n
It was discovered that a use-after-free vulnerability existed in the
\nBluetooth stack in the Linux kernel. A local attacker could use this to
\ncause a denial of service (system crash) or possibly execute arbitrary
\ncode. (CVE-2022-3640)<\/p>\n
It was discovered that the Xen netback driver in the Linux kernel did not
\nproperly handle packets structured in certain ways. An attacker in a guest
\nVM could possibly use this to cause a denial of service (host NIC
\navailability). (CVE-2022-3643)<\/p>\n
Khalid Masum discovered that the NILFS2 file system implementation in the
\nLinux kernel did not properly handle certain error conditions, leading to a
\nuse-after-free vulnerability. A local attacker could use this to cause a
\ndenial of service or possibly execute arbitrary code. (CVE-2022-3649)<\/p>\n
It was discovered that a race condition existed in the SMSC UFX USB driver
\nimplementation in the Linux kernel, leading to a use-after-free
\nvulnerability. A physically proximate attacker could use this to cause a
\ndenial of service (system crash) or possibly execute arbitrary code.
\n(CVE-2022-41849)<\/p>\n
It was discovered that a race condition existed in the Roccat HID driver in
\nthe Linux kernel, leading to a use-after-free vulnerability. A local
\nattacker could use this to cause a denial of service (system crash) or
\npossibly execute arbitrary code. (CVE-2022-41850)<\/p>\n
Tam\u00e1s Koczka discovered that the Bluetooth L2CAP implementation in the
\nLinux kernel did not properly initialize memory in some situations. A
\nphysically proximate attacker could possibly use this to expose sensitive
\ninformation (kernel memory). (CVE-2022-42895)<\/p>\n
It was discovered that an integer overflow vulnerability existed in the
\nBluetooth subsystem in the Linux kernel. A physically proximate attacker
\ncould use this to cause a denial of service (system crash).
\n(CVE-2022-45934)<\/p>\n
It was discovered that the binder IPC implementation in the Linux kernel USN-5875-1: Linux kernel (GKE) vulnerabilities It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-43945) Tam\u00e1s Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-42896) It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did not properly perform bounds checking in some situations. A physically proximate attacker could use this to craft a malicious USB device that when inserted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3628) It [ more… ]<\/a><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[586],"tags":[587],"class_list":["post-50082","post","type-post","status-publish","format-standard","hentry","category-ubuntu-usn","tag-ubuntu-usn"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/50082","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/comments?post=50082"}],"version-history":[{"count":1,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/50082\/revisions"}],"predecessor-version":[{"id":50083,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/50082\/revisions\/50083"}],"wp:attachment":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/media?parent=50082"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/categories?post=50082"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/tags?post=50082"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\ncontained a use-after-free vulnerability. A local attacker could use this
\nto cause a denial of service (system crash) or possibly execute arbitrary
\ncode. (CVE-2023-20928)
\nSource: USN-5875-1: Linux kernel (GKE) vulnerabilities<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"