Ubuntu update for linux

Published: 2023-03-29 | Updated: 2023-03-30

Risk	Medium
Patch available	YES
Number of vulnerabilities	11
CVE-ID	CVE-2021-3669 CVE-2022-3424 CVE-2022-36280 CVE-2022-41218 CVE-2022-47929 CVE-2023-0045 CVE-2023-0266 CVE-2023-0394 CVE-2023-23455 CVE-2023-23559 CVE-2023-28328
CWE-ID	CWE-400 CWE-416 CWE-787 CWE-476 CWE-254 CWE-843 CWE-190
Exploitation vector	Local
Public exploit	Public exploit code for vulnerability #4 is available. Public exploit code for vulnerability #6 is available. Vulnerability #7 is being exploited in the wild.
Vulnerable software Subscribe	Ubuntu Operating systems & Components / Operating system linux-image-virtual (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-raspi2 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oracle-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-dell300x (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-208-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-208-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-208-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1153-aws (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1137-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1129-raspi2 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1116-oracle (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1062-dell300x (Ubuntu package) Operating systems & Components / Operating system package or component
Vendor	Canonical Ltd.

Security Bulletin

This security bulletin contains information about 11 vulnerabilities.

1) Resource exhaustion

EUVDB-ID: #VU63911

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-3669

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to measuring usage of the shared memory does not scale with large shared memory segment counts. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 18.04

linux-image-virtual (Ubuntu package): before 4.15.0.208.191

linux-image-raspi2 (Ubuntu package): before 4.15.0.1129.124

linux-image-oracle-lts-18.04 (Ubuntu package): before 4.15.0.1116.121

linux-image-lowlatency (Ubuntu package): before 4.15.0.208.191

linux-image-kvm (Ubuntu package): before 4.15.0.1137.128

linux-image-generic-lpae (Ubuntu package): before 4.15.0.208.191

linux-image-generic (Ubuntu package): before 4.15.0.208.191

linux-image-dell300x (Ubuntu package): before 4.15.0.1062.61

linux-image-aws-lts-18.04 (Ubuntu package): before 4.15.0.1153.151

linux-image-4.15.0-208-lowlatency (Ubuntu package): before 4.15.0-208.220

linux-image-4.15.0-208-generic-lpae (Ubuntu package): before 4.15.0-208.220

linux-image-4.15.0-208-generic (Ubuntu package): before 4.15.0-208.220

linux-image-4.15.0-1153-aws (Ubuntu package): before 4.15.0-1153.166

linux-image-4.15.0-1137-kvm (Ubuntu package): before 4.15.0-1137.142

linux-image-4.15.0-1129-raspi2 (Ubuntu package): before 4.15.0-1129.137

linux-image-4.15.0-1116-oracle (Ubuntu package): before 4.15.0-1116.127

linux-image-4.15.0-1062-dell300x (Ubuntu package): before 4.15.0-1062.67

External links

http://ubuntu.com/security/notices/USN-5984-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Use-after-free

EUVDB-ID: #VU69759

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3424

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the gru_set_context_option(), gru_fault() and gru_handle_user_call_os() functions in Linux kernel. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.