Risk | High |
Patch available | YES |
Number of vulnerabilities | 39 |
CVE-ID | CVE-2022-45886 CVE-2022-45919 CVE-2022-45887 CVE-2022-48425 CVE-2023-1206 CVE-2023-20569 CVE-2023-20588 CVE-2023-21264 CVE-2023-2156 CVE-2023-31083 CVE-2023-3212 CVE-2023-34319 CVE-2023-3772 CVE-2023-38427 CVE-2023-38430 CVE-2023-38431 CVE-2023-38432 CVE-2023-3863 CVE-2023-3865 CVE-2023-3866 CVE-2023-3867 CVE-2023-40283 CVE-2023-4128 CVE-2023-4132 CVE-2023-4134 CVE-2023-4155 CVE-2023-4194 CVE-2023-4244 CVE-2023-4273 CVE-2023-42752 CVE-2023-42753 CVE-2023-42755 CVE-2023-42756 CVE-2023-44466 CVE-2023-4569 CVE-2023-4622 CVE-2023-4623 CVE-2023-4921 CVE-2023-5197 |
CWE-ID | CWE-416 CWE-362 CWE-763 CWE-400 CWE-200 CWE-369 CWE-119 CWE-617 CWE-476 CWE-190 CWE-125 CWE-843 CWE-121 CWE-787 CWE-401 |
Exploitation vector | Network |
Public exploit | N/A |
Vulnerable software Subscribe |
Ubuntu Operating systems & Components / Operating system linux-image-nvidia-hwe-22.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-nvidia-64k-hwe-22.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-nvidia-64k-6.2 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-nvidia-6.2 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-6.2.0-1011-nvidia-64k (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-6.2.0-1011-nvidia (Ubuntu package) Operating systems & Components / Operating system package or component |
Vendor | Canonical Ltd. |
Security Bulletin
This security bulletin contains information about 39 vulnerabilities.
EUVDB-ID: #VU75336
Risk: Low
CVSSv3.1: 6.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-45886
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU75337
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-45919
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU75338
Risk: Low
CVSSv3.1: 4.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-45887
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a race condition in drivers/media/usb/ttusb-dec/ttusb_dec.c in Linux kernel. A local user can exploit the race and crash the kernel.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU77625
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-48425
CWE-ID:
CWE-763 - Release of invalid pointer or reference
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to an invalid kfree in fs/ntfs3/inode.c caused by improper validation of MFT flags before replaying logs. A local user can execute arbitrary code with elevated privileges.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU77953
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-1206
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a hash collision flaw in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when an attacker makes a new kind of SYN flood attack. A remote attacker can increase the CPU usage of the server that accepts IPV6 connections up to 95%.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79263
Risk: Low
CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-20569
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a remote user to gain access to potentially sensitive information.
The vulnerability exists due to a side channel issue in AMD CPUs. A remote user can influence the return address prediction and gain unauthorized access to sensitive information on the system.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79239
Risk: Low
CVSSv3.1: 3.3 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-20588
CWE-ID:
CWE-369 - Divide By Zero
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to a divide by zero error that can return speculative data. A local user can gain access to potentially sensitive information.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79075
Risk: Low
CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-21264
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error in KVM implementation in the Android kernel. A local application can trigger memory corruption and execute arbitrary code with elevated privileged.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU76392
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-2156
CWE-ID:
CWE-617 - Reachable Assertion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a reachable assertion when handling IPv6 RPL protocol. A remote attacker can send specially crafted packets to the system and perform a denial of service (DoS) attack.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79496
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-31083
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error within the hci_uart_tty_ioctl() function in drivers/bluetooth/hci_ldisc.c. A local user can pass specially crafted data to the system and perform a denial of service (DoS) attack.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU78009
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-3212
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error within the gfs2 file system in the Linux kernel. A local user can perform a denial of service (DoS) attack.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79260
Risk: Medium
CVSSv3.1: 6.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-34319
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a malicious guest to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in netback when processing certain packets. A malicious guest can send specially crafted packets to the backend, trigger memory corruption and crash the hypervisor.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU80578
Risk: Low
CVSSv3.1: 3.9 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-3772
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error within the xfrm_update_ae_params() function in the IP framework for transforming packets (XFRM subsystem). A local user with CAP_NET_ADMIN privileges can perform a denial of service (DoS) attack.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU81658
Risk: High
CVSSv3.1: 7.7 [CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-38427
CWE-ID:
CWE-190 - Integer overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to integer overflow within the deassemble_neg_contexts() function in fs/smb/server/smb2pdu.c in ksmbd. A remote attacker can send specially crafted data to ksmbd, trigger an integer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79477
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-38430
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in ksmbd when handling SMB request protocol ID. A remote attacker can send specially crafted packets to the system to trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU81659
Risk: Medium
CVSSv3.1: 6.2 [CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-38431
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in fs/smb/server/connection.c within ksmbd. A remote attacker can send a specially crafted data to the system, trigger an out-of-bounds read error and read contents of memory or perform a denial of service (DoS) attack.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79478
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-38432
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in fs/smb/server/smb2misc.c in ksmbd. A remote attacker can send specially crafted packets to the system to trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79479
Risk: Low
CVSSv3.1: 7.1 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-3863
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the nfc_llcp_find_local() function in net/nfc/llcp_core.c in NFC implementation in Linux kernel. A local user can execute arbitrary code with elevated privileges.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU81661
Risk: Medium
CVSSv3.1: 4.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-3865
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote user to gain access to potentially sensitive information or perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition within the ksmbd_smb2_check_message() function in fs/smb/server/smb2misc.c when parsing smb2_hdr structure. A remote user can send specially crafted packets to ksmbd, trigger an out-of-bounds read error and read contents of memory or perform a denial of service (DoS) attack.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU81662
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-3866
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error within the void __handle_ksmbd_work() function in fs/smb/server/server.c when handling chained requests. A remote attacker can send specially crafted data to the ksmbd and perform a denial of service (DoS) attack.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU82661
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-3867
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition within the KSMBD implementation in the Linux kernel. A remote attacker can trigger an out-of-bounds read error and read contents of memory on the system.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79714
Risk: Low
CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-40283
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the l2cap_sock_release() function in net/bluetooth/l2cap_sock.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79486
Risk: Low
CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-4128
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79712
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-4132
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a use-after-free error within the siano smsusb module in the Linux kernel. A local user can trigger a use-after-free error and crash the kernel.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU80798
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-4134
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a use-after-free error within the cyttsp4_watchdog_work() in cyttsp4_core driver. A local user can trigger memory corruption and crash the kernel.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79488
Risk: Low
CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-4155
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a race condition in KVM AMD Secure Encrypted Virtualization (SEV) in Linux kernel. A local user can exploit the race and escalate privileges on the system.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79485
Risk: Low
CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-4194
CWE-ID:
CWE-843 - Type confusion
Exploit availability: No
DescriptionThe vulnerability allows a local user to bypass implemented security restrictions.
The vulnerability exists due to a type confusion error in TUN/TAP functionality. A local user can bypass network filters and gain unauthorized access to some resources.
The vulnerability exists due to incomplete fix for #VU72742 (CVE-2023-1076).
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU82306
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-4244
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the Linux kernel netfilter: nf_tables component. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU79487
Risk: Low
CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-4273
CWE-ID:
CWE-121 - Stack-based buffer overflow
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error in the implementation of the file name reconstruction function in the exFAT driver in Linux kernel. A local user can trigger a stack overflow and execute arbitrary code with elevated privileges.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU80877
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-42752
CWE-ID:
CWE-190 - Integer overflow
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to integer overflow within the __alloc_skb() function. A local user can trigger integer overflow and crash the kernel.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU81663
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-42753
CWE-ID:
CWE-787 - Out-of-bounds write
Exploit availability: No
Description The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error in the netfilter subsystem in Linux kernel. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU82305
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-42755
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform denial of service (DoS) attack.
The vulnerability exists due to a boundary condition within the the IPv4 Resource Reservation Protocol (RSVP) classifier function in the Linux kernel. A local user can trigger an out-of-bounds read error and crash the Linux kernel.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU81690
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-42756
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a race condition in the Netfilter subsystem. A local user can exploit the race between IPSET_CMD_ADD and IPSET_CMD_SWAP and gain crash the kernel.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU81660
Risk: High
CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-44466
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the ceph_decode_32() function in net/ceph/messenger_v2.c in the Ceph filesystem when handling TCP packets. A remote attacker can send specially crafted HELLO or AUTH frames to trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU80584
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-4569
CWE-ID:
CWE-401 - Missing release of memory after effective lifetime
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform DoS attack on the target system.
The vulnerability exists due memory leak within the nft_set_catchall_flush() function in net/netfilter/nf_tables_api.c. A local user can perform a denial of service attack.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU80583
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-4622
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the unix_stream_sendpage() function in af_unix component. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.
MitigationUpdate the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU81664
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-4623
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the the Linux kernel net/sched: sch_hfsc (HFSC qdisc traffic control) component. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU81693
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-4921
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error in the qfq_dequeue() function within the the Linux kernel's net/sched: sch_qfq component. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU82304
Risk: Low
CVSSv3.1: 5.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-5197
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within Linux kernel netfilter: nf_tables component. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.
Update the affected package linux-nvidia-6.2 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package): before 6.2.0.1011.13
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package): before 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia (Ubuntu package): before 6.2.0-1011.11
External linkshttp://ubuntu.com/security/notices/USN-6466-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.