Ubuntu update for linux



Risk High
Patch available YES
Number of vulnerabilities 13
CVE-ID CVE-2023-2002
CVE-2023-2269
CVE-2023-3141
CVE-2023-32248
CVE-2023-32254
CVE-2023-3268
CVE-2023-3312
CVE-2023-3317
CVE-2023-35823
CVE-2023-35824
CVE-2023-35826
CVE-2023-35828
CVE-2023-35829
CWE-ID CWE-264
CWE-667
CWE-416
CWE-476
CWE-362
CWE-125
CWE-415
Exploitation vector Network
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
 Ubuntu
Operating systems & Components / Operating system

linux-image-virtual (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-raspi-nolpae (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-raspi (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-oracle (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-lowlatency-64k (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-lowlatency (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-kvm (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-ibm (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-generic-lpae (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-generic-64k (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-generic (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-gcp (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-azure (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-aws (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-27-generic-lpae (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-27-generic-64k (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-27-generic (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1011-gcp (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1010-raspi (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1010-lowlatency (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1010-kvm (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1009-oracle (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1009-azure (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1009-aws (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1007-ibm (Ubuntu package)
Operating systems & Components / Operating system package or component

Vendor Canonical Ltd.

Security Bulletin

This security bulletin contains information about 13 vulnerabilities.

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU75163

Risk: Low

CVSSv3.1: 4 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C]

CVE-ID: CVE-2023-2002

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: Yes

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper permissions check in the Bluetooth subsystem when handling ioctl system calls of HCI sockets. A local user can acquire a trusted socket, leading to unauthorized execution of management commands.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

2) Improper locking

EUVDB-ID: #VU77243

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-2269

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service attack (DoS).

The vulnerability exists due to double-locking error in table_clear in drivers/md/dm-ioctl.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Use-after-free

EUVDB-ID: #VU77955

Risk: Low

CVSSv3.1: 6.2 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-3141

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the r592_remove() function of drivers/memstick/host/r592.c in media access in the Linux kernel. A local user can trigger a use-after-free error and escalate privileges on the system.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) NULL pointer dereference

EUVDB-ID: #VU79474

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-32248

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in ksmbd in Linux kernel when handling SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. A remote attacker can send  specially crafted data to the system and perform a denial of service (DoS) attack.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Race condition

EUVDB-ID: #VU77498

Risk: High

CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-32254

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to a race condition within fs/ksmbd/mgmt/tree_connect.c in ksmbd in Linux kernel when processing SMB2_TREE_DISCONNECT commands. A remote attacker can trigger a use-after-free error using concurrent smb2 tree disconnect requests and execute arbitrary code on the system.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Out-of-bounds read

EUVDB-ID: #VU78008

Risk: Low

CVSSv3.1: 5.3 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-3268

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the relay_file_read_start_pos() function in kernel/relay.c in the relayfs. A local user can trigger an out-of-bounds read error and read contents of memory on the system or crash the kernel.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Double Free

EUVDB-ID: #VU79473

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-3312

CWE-ID: CWE-415 - Double Free

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within drivers/cpufreq/qcom-cpufreq-hw.c in Linux kernel. A local user can pass specially crafted data to the system, trigger a double free error and perform a denial of service (DoS) attack.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Use-after-free

EUVDB-ID: #VU79472

Risk: Low

CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-3317

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the mt7921_check_offload_capability() function in drivers/net/wireless/mediatek/mt76/mt7921/init.c. A local user can trigger a use-after-free error and execute arbitrary code on the system.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Race condition

EUVDB-ID: #VU77957

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-35823

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition within the saa7134_finidev() function in drivers/media/pci/saa7134/saa7134-core.c. A local user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Use-after-free

EUVDB-ID: #VU78062

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-35824

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the dm1105_remove() function in drivers/media/pci/dm1105/dm1105.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Use-after-free

EUVDB-ID: #VU79471

Risk: Low

CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-35826

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local  user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the cedrus_remove() function in drivers/staging/media/sunxi/cedrus/cedrus.c. A local user can trigger a use-after-free error and execute arbitrary code on the system.


Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Race condition

EUVDB-ID: #VU77958

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-35828

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition within the renesas_usb3_remove() function in drivers/usb/gadget/udc/renesas_usb3.c. A local user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Use-after-free

EUVDB-ID: #VU78264

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-35829

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the rkvdec_remove() function in drivers/staging/media/rkvdec/rkvdec.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-virtual (Ubuntu package): before 6.2.0.27.27

linux-image-raspi-nolpae (Ubuntu package): before 6.2.0.1010.13

linux-image-raspi (Ubuntu package): before 6.2.0.1010.13

linux-image-oracle (Ubuntu package): before 6.2.0.1009.9

linux-image-lowlatency-64k (Ubuntu package): before 6.2.0.1010.10

linux-image-lowlatency (Ubuntu package): before 6.2.0.1010.10

linux-image-kvm (Ubuntu package): before 6.2.0.1010.10

linux-image-ibm (Ubuntu package): before 6.2.0.1007.7

linux-image-generic-lpae (Ubuntu package): before 6.2.0.27.27

linux-image-generic-64k (Ubuntu package): before 6.2.0.27.27

linux-image-generic (Ubuntu package): before 6.2.0.27.27

linux-image-gcp (Ubuntu package): before 6.2.0.1011.11

linux-image-azure (Ubuntu package): before 6.2.0.1009.9

linux-image-aws (Ubuntu package): before 6.2.0.1009.10

linux-image-6.2.0-27-generic-lpae (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic-64k (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-27-generic (Ubuntu package): before 6.2.0-27.28

linux-image-6.2.0-1011-gcp (Ubuntu package): before 6.2.0-1011.11

linux-image-6.2.0-1010-raspi (Ubuntu package): before 6.2.0-1010.12

linux-image-6.2.0-1010-lowlatency-64k (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-lowlatency (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1010-kvm (Ubuntu package): before 6.2.0-1010.10

linux-image-6.2.0-1009-oracle (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-azure (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1009-aws (Ubuntu package): before 6.2.0-1009.9

linux-image-6.2.0-1007-ibm (Ubuntu package): before 6.2.0-1007.7

CPE2.3 External links

http://ubuntu.com/security/notices/USN-6283-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###