Ubuntu update for linux-azure



| Updated: 2024-06-16
Risk Medium
Patch available YES
Number of vulnerabilities 20
CVE-ID CVE-2022-4269
CVE-2023-1380
CVE-2023-1583
CVE-2023-1611
CVE-2023-1670
CVE-2023-1855
CVE-2023-1859
CVE-2023-1989
CVE-2023-1990
CVE-2023-2194
CVE-2023-2235
CVE-2023-2612
CVE-2023-28466
CVE-2023-28866
CVE-2023-30456
CVE-2023-30772
CVE-2023-31436
CVE-2023-32233
CVE-2023-33203
CVE-2023-33288
CWE-ID CWE-833
CWE-125
CWE-476
CWE-416
CWE-787
CWE-362
CWE-20
Exploitation vector Network
Public exploit Public exploit code for vulnerability #18 is available.
Vulnerable software
 Ubuntu
Operating systems & Components / Operating system

linux-image-oracle (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-gcp (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-kvm (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1005-azure (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-azure (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1003-ibm (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1005-oracle (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1007-gcp (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-ibm (Ubuntu package)
Operating systems & Components / Operating system package or component

linux-image-6.2.0-1006-kvm (Ubuntu package)
Operating systems & Components / Operating system package or component

Vendor Canonical Ltd.

Security Bulletin

This security bulletin contains information about 20 vulnerabilities.

1) Deadlock

EUVDB-ID: #VU73186

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-4269

CWE-ID: CWE-833 - Deadlock

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an error in the Linux kernel Traffic Control (TC) subsystem. A local user can use a specific network configuration (redirecting egress packets to ingress using TC action "mirred") to trigger a CPU soft lockup.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds read

EUVDB-ID: #VU73280

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1380

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the Broadcom Full MAC Wi-Fi driver (brcmfmac.ko). A local user can trigger an out-of-bounds read error and read contents of kernel memory on the system.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) NULL pointer dereference

EUVDB-ID: #VU75449

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1583

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the io_file_bitmap_get() function in io_uring/filetable.c in the io_uring sub-component. A local user can trigger denial of service conditions via IORING_FILE_INDEX_ALLOC.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Use-after-free

EUVDB-ID: #VU75204

Risk: Low

CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1611

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the btrfs_search_slot() function in fs/btrfs/ctree.c. A local user can trigger a use-after-free error and crash the kernel.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Use-after-free

EUVDB-ID: #VU75450

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1670

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the Xircom 16-bit PCMCIA (PC-card) Ethernet driver. A local user can trigger a use-after-free error and execute arbitrary code on the system.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Use-after-free

EUVDB-ID: #VU75451

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1855

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the xgene_hwmon_remove() function in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). A local user can trigger a use-after-free error and execute arbitrary code on the system.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Use-after-free

EUVDB-ID: #VU75769

Risk: Medium

CVSSv4.0: 4.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-1859

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a malicious guest to gain access to sensitive information or perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the xen_9pfs_front_removet() function in net/9p/trans_xen.c in Xen transport for 9pfs. A malicious guest VM can trigger a use-after-free error and gain access to sensitive information of the hypervisor or crash it.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Use-after-free

EUVDB-ID: #VU75452

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1989

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the btsdio_remove() function in driversluetoothtsdio.c. A local user can trigger a use-after-free error and escalate privileges on the system.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Use-after-free

EUVDB-ID: #VU75453

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1990

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the ndlc_remove() function in drivers/nfc/st-nci/ndlc.c. A local user can trigger a use-after-free error and perform a denial of service (DoS) attack.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Out-of-bounds write

EUVDB-ID: #VU77249

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-2194

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in the Linux kernel's SLIMpro I2C device driver. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Use-after-free

EUVDB-ID: #VU75997

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-2235

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in the Linux Kernel Performance Events system. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Race condition

EUVDB-ID: #VU76655

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-2612

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a race condition within the shiftfs filesystem when handling inode locking in some
situations. A local user can exploit the race and cause a denial of service (kernel deadlock).

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Race condition

EUVDB-ID: #VU74628

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-28466

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition caused by a missing lock_sock call within the do_tls_getsockopt() function in net/tls/tls_main.c. A local user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Out-of-bounds read

EUVDB-ID: #VU75455

Risk: Low

CVSSv4.0: 0.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-28866

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows an attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in net/bluetooth/hci_sync.c in Linux kernel. An attacker with physical proximity to device can trigger an out-of-bounds read error and read contents of memory on the system.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Input validation error

EUVDB-ID: #VU75456

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-30456

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of consistency for for CR0 and CR4 in arch/x86/kvm/vmx/nested.c in the Linux kernel. A local user can execute arbitrary code with elevated privileges.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Race condition

EUVDB-ID: #VU75996

Risk: Low

CVSSv4.0: 4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-30772

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows an attacker to compromise the affected system.

The vulnerability exists due to a race condition in rivers/power/supply/da9150-charger.c in Linux kernel. An attacker with physical access to device can trigger a race condition while unplugin the device and execute arbitrary code on the system.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Out-of-bounds write

EUVDB-ID: #VU76098

Risk: Low

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-31436

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the qfq_change_class() function in net/sched/sch_qfq.c when handling the MTU value provided to the QFQ Scheduler. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Use-after-free

EUVDB-ID: #VU75807

Risk: Low

CVSSv4.0: 7.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2023-32233

CWE-ID: CWE-416 - Use After Free

Exploit availability: Yes

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in Netfilter nf_tables when processing batch requests. A local user can trigger a use-after-free error and execute arbitrary code with root privileges.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

19) Race condition

EUVDB-ID: #VU77496

Risk: Low

CVSSv4.0: 4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-33203

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows an attacker to escalate privileges on the system.

The vulnerability exists due to a race condition in drivers/net/ethernet/qualcomm/emac/emac.c. An attacker with physical access to the system can exploit the race by unplugging an emac based device and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) Use-after-free

EUVDB-ID: #VU76410

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-33288

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local authenticated user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the bq24190_remove function in drivers/power/supply/bq24190_charger.c. A local authenticated user can trigger a use-after-free error and perform a denial of service (DoS) attack.

Mitigation

Update the affected package linux-azure to the latest version.

Vulnerable software versions

Ubuntu: 23.04

linux-image-oracle (Ubuntu package): before 6.2.0.1005.5

linux-image-gcp (Ubuntu package): before 6.2.0.1007.7

linux-image-kvm (Ubuntu package): before 6.2.0.1006.6

linux-image-6.2.0-1005-azure (Ubuntu package): before 6.2.0-1005.5

linux-image-azure (Ubuntu package): before 6.2.0.1005.5

linux-image-6.2.0-1003-ibm (Ubuntu package): before 6.2.0-1003.3

linux-image-6.2.0-1005-oracle (Ubuntu package): before 6.2.0-1005.5

linux-image-6.2.0-1007-gcp (Ubuntu package): before 6.2.0-1007.7

linux-image-ibm (Ubuntu package): before 6.2.0.1003.3

linux-image-6.2.0-1006-kvm (Ubuntu package): before 6.2.0-1006.6

CPE2.3 External links

https://ubuntu.com/security/notices/USN-6186-1


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###