Ubuntu update for linux-azure

Published: 2023-11-30

Risk	High
Patch available	YES
Number of vulnerabilities	3
CVE-ID	CVE-2023-25775 CVE-2023-31085 CVE-2023-45871
CWE-ID	CWE-284 CWE-369 CWE-119
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	Ubuntu Operating systems & Components / Operating system linux-image-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure-fde (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure-cvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gkeop-5.15 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gkeop (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gke-5.15 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gke (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp-lts-22.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure-lts-22.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure-fde-lts-22.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1052-azure-fde (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1052-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1047-gke (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1047-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1033-gkeop (Ubuntu package) Operating systems & Components / Operating system package or component
Vendor	Canonical Ltd.

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Improper access control

EUVDB-ID: #VU79371

Risk: Medium

CVSSv3.1: 4.9 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-25775

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to improper access restrictions in the Intel Ethernet Controller RDMA driver for Linux. A remote non-authenticated attacker can bypass implemented security restrictions and gain access to sensitive information.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 20.04 - 22.04

linux-image-gcp (Ubuntu package): before 5.15.0.1047.55~20.04.1

linux-image-azure-fde (Ubuntu package): before 5.15.0.1052.60~20.04.1.30

linux-image-azure-cvm (Ubuntu package): before 5.15.0.1052.60~20.04.41

linux-image-azure (Ubuntu package): before 5.15.0.1052.60~20.04.41

linux-image-gkeop-5.15 (Ubuntu package): before 5.15.0.1033.39~20.04.29

linux-image-gkeop (Ubuntu package): before 5.15.0.1033.32

linux-image-gke-5.15 (Ubuntu package): before 5.15.0.1047.46

linux-image-gke (Ubuntu package): before 5.15.0.1047.46

linux-image-gcp-lts-22.04 (Ubuntu package): before 5.15.0.1047.43

linux-image-azure-lts-22.04 (Ubuntu package): before 5.15.0.1052.48

linux-image-azure-fde-lts-22.04 (Ubuntu package): before 5.15.0.1052.60.30

linux-image-5.15.0-1052-azure-fde (Ubuntu package): before 5.15.0-1052.60~20.04.1.1

linux-image-5.15.0-1052-azure (Ubuntu package): before 5.15.0-1052.60~20.04.1

linux-image-5.15.0-1047-gke (Ubuntu package): before 5.15.0-1047.52

linux-image-5.15.0-1047-gcp (Ubuntu package): before 5.15.0-1047.55~20.04.1

linux-image-5.15.0-1033-gkeop (Ubuntu package): before 5.15.0-1033.39~20.04.1

External links

http://ubuntu.com/security/notices/USN-6496-2

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Division by zero

EUVDB-ID: #VU82660

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-31085

CWE-ID: CWE-369 - Divide By Zero

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a divide by zero error within the drivers/mtd/ubi/cdev.c driver. A local user can perform a denial of service (DoS) attack.