USN-6284-1: Linux kernel vulnerabilities<\/p>\n
It was discovered that the netlink implementation in the Linux kernel did
\nnot properly validate policies when parsing attributes in some situations.
\nAn attacker could use this to cause a denial of service (infinite
\nrecursion). (CVE-2020-36691)<\/p>\n
Billy Jheng Bing Jhong discovered that the CIFS network file system
\nimplementation in the Linux kernel did not properly validate arguments to
\nioctl() in some situations. A local attacker could possibly use this to
\ncause a denial of service (system crash). (CVE-2022-0168)<\/p>\n
It was discovered that the ext4 file system implementation in the Linux
\nkernel contained a use-after-free vulnerability. An attacker could use this
\nto construct a malicious ext4 file system image that, when mounted, could
\ncause a denial of service (system crash). (CVE-2022-1184)<\/p>\n
It was discovered that some AMD x86-64 processors with SMT enabled could
\nspeculatively execute instructions using a return address from a sibling
\nthread. A local attacker could possibly use this to expose sensitive
\ninformation. (CVE-2022-27672)<\/p>\n
William Zhao discovered that the Traffic Control (TC) subsystem in the
\nLinux kernel did not properly handle network packet retransmission in
\ncertain situations. A local attacker could use this to cause a denial of
\nservice (kernel deadlock). (CVE-2022-4269)<\/p>\n
It was discovered that a race condition existed in the qdisc implementation
\nin the Linux kernel, leading to a use-after-free vulnerability. A local
\nattacker could use this to cause a denial of service (system crash) or
\npossibly execute arbitrary code. (CVE-2023-0590)<\/p>\n
It was discovered that a race condition existed in the btrfs file system
\nimplementation in the Linux kernel, leading to a use-after-free
\nvulnerability. A local attacker could use this to cause a denial of service
\n(system crash) or possibly expose sensitive information. (CVE-2023-1611)<\/p>\n
It was discovered that the APM X-Gene SoC hardware monitoring driver in the
\nLinux kernel contained a race condition, leading to a use-after-free
\nvulnerability. A local attacker could use this to cause a denial of service
\n(system crash) or expose sensitive information (kernel memory).
\n(CVE-2023-1855)<\/p>\n
It was discovered that the ST NCI NFC driver did not properly handle device
\nremoval events. A physically proximate attacker could use this to cause a
\ndenial of service (system crash). (CVE-2023-1990)<\/p>\n
It was discovered that the XFS file system implementation in the Linux
\nkernel did not properly perform metadata validation when mounting certain
\nimages. An attacker could use this to specially craft a file system image
\nthat, when mounted, could cause a denial of service (system crash).
\n(CVE-2023-2124)<\/p>\n
It was discovered that the SLIMpro I2C device driver in the Linux kernel
\ndid not properly validate user-supplied data in some situations, leading to
\nan out-of-bounds write vulnerability. A privileged attacker could use this
\nto cause a denial of service (system crash) or possibly execute arbitrary
\ncode. (CVE-2023-2194)<\/p>\n
It was discovered that a race condition existed in the TLS subsystem in the
\nLinux kernel, leading to a use-after-free or a null pointer dereference
\nvulnerability. A local attacker could use this to cause a denial of service
\n(system crash) or possibly execute arbitrary code. (CVE-2023-28466)<\/p>\n
It was discovered that the DA9150 charger driver in the Linux kernel did
\nnot properly handle device removal, leading to a user-after free
\nvulnerability. A physically proximate attacker could use this to cause a
\ndenial of service (system crash) or possibly execute arbitrary code.
\n(CVE-2023-30772)<\/p>\n
It was discovered that the btrfs file system implementation in the Linux
\nkernel did not properly handle error conditions in some situations, leading
\nto a use-after-free vulnerability. A local attacker could possibly use this
\nto cause a denial of service (system crash). (CVE-2023-3111)<\/p>\n
It was discovered that the Ricoh R5C592 MemoryStick card reader driver in
\nthe Linux kernel contained a race condition during module unload, leading
\nto a use-after-free vulnerability. A local attacker could use this to cause
\na denial of service (system crash) or possibly execute arbitrary code.
\n(CVE-2023-3141)<\/p>\n
It was discovered that the Qualcomm EMAC ethernet driver in the Linux USN-6284-1: Linux kernel vulnerabilities It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service (infinite recursion). (CVE-2020-36691) Billy Jheng Bing Jhong discovered that the CIFS network file system implementation in the Linux kernel did not properly validate arguments to ioctl() in some situations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-0168) It was discovered that the ext4 file system implementation in the Linux kernel contained a use-after-free vulnerability. An attacker could use this to construct a malicious ext4 file system image that, when mounted, could cause a denial of service (system crash). (CVE-2022-1184) It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using [ more… ]<\/a><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[586],"tags":[587],"class_list":["post-52681","post","type-post","status-publish","format-standard","hentry","category-ubuntu-usn","tag-ubuntu-usn"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/52681","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/comments?post=52681"}],"version-history":[{"count":1,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/52681\/revisions"}],"predecessor-version":[{"id":52682,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/52681\/revisions\/52682"}],"wp:attachment":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/media?parent=52681"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/categories?post=52681"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/tags?post=52681"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nkernel did not properly handle device removal, leading to a user-after free
\nvulnerability. A physically proximate attacker could use this to cause a
\ndenial of service (system crash) or possibly execute arbitrary code.
\n(CVE-2023-33203)
\nSource: USN-6284-1: Linux kernel vulnerabilities<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"