Ubuntu update for linux

Published: 2024-06-08

Risk	Medium
Patch available	YES
Number of vulnerabilities	17
CVE-ID	CVE-2023-47233 CVE-2023-52524 CVE-2023-52530 CVE-2023-52601 CVE-2023-52439 CVE-2024-26635 CVE-2023-52602 CVE-2024-26614 CVE-2024-26704 CVE-2023-52604 CVE-2023-52566 CVE-2021-46981 CVE-2024-26622 CVE-2024-26735 CVE-2024-26805 CVE-2024-26801 CVE-2023-52583
CWE-ID	CWE-416 CWE-667 CWE-119 CWE-908 CWE-125 CWE-399 CWE-415 CWE-476
Exploitation vector	Network
Public exploit	N/A
Vulnerable software	Ubuntu Operating systems & Components / Operating system linux-image-4.15.0-225-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-225-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1177-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1168-aws (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1162-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1152-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1131-oracle (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oracle-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oracle (Ubuntu package) Operating systems & Components / Operating system package or component
Vendor	Canonical Ltd.

Security Bulletin

This security bulletin contains information about 17 vulnerabilities.

1) Use-after-free

EUVDB-ID: #VU82755

Risk: Low

CVSSv3.1: 5.9 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-47233

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows an attacker to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the brcm80211 in a brcmf_cfg80211_detach in the device unplugging (disconnect the USB by hotplug) code. An attacker with physical access to device can trigger a use-after-free error and escalate privileges on the system.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 16.04 - 18.04

linux-image-4.15.0-225-lowlatency (Ubuntu package): before Ubuntu Pro

linux-image-4.15.0-225-generic (Ubuntu package): before Ubuntu Pro

linux-image-4.15.0-1177-azure (Ubuntu package): before Ubuntu Pro

linux-image-4.15.0-1168-aws (Ubuntu package): before Ubuntu Pro

linux-image-4.15.0-1162-gcp (Ubuntu package): before Ubuntu Pro

linux-image-4.15.0-1152-kvm (Ubuntu package): before Ubuntu Pro

linux-image-4.15.0-1131-oracle (Ubuntu package): before Ubuntu Pro

linux-image-oracle-lts-18.04 (Ubuntu package): before Ubuntu Pro

linux-image-gcp-lts-18.04 (Ubuntu package): before Ubuntu Pro

linux-image-azure-lts-18.04 (Ubuntu package): before Ubuntu Pro

linux-image-aws-lts-18.04 (Ubuntu package): before Ubuntu Pro

linux-image-lowlatency (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-kvm (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-generic (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-virtual (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-generic-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-lowlatency-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-oem (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-virtual-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)

CPE2.3

External links

http://ubuntu.com/security/notices/USN-6777-1

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Improper locking

EUVDB-ID: #VU91319

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-52524

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the nfc_llcp_register_device() function in net/nfc/llcp_core.c. A local user can perform a denial of service (DoS) attack.