Lucene search

UbuntuUSN-6043-1

HistoryApr 26, 2023 - 12:00 a.m.

Linux kernel vulnerabilities

2023-04-2600:00:00

ubuntu.com

116

ubuntu

linux kernel

security vulnerabilities

traffic-control index

tcindex

overlayfs

elevated privileges

cve-2023-1829

cve-2023-0386

amazon web services

aws

microsoft azure cloud

google cloud platform

gcp

linux hardware enablement

hwe kernel

ibm cloud

kvm

cloud environments

low latency kernel

oracle cloud

raspberry pi

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.002

Percentile

61.0%

JSON

Releases

Ubuntu 22.10
Ubuntu 22.04 LTS

Packages

linux - Linux kernel
linux-aws - Linux kernel for Amazon Web Services (AWS) systems
linux-azure - Linux kernel for Microsoft Azure Cloud systems
linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
linux-hwe-5.19 - Linux hardware enablement (HWE) kernel
linux-ibm - Linux kernel for IBM cloud systems
linux-kvm - Linux kernel for cloud environments
linux-lowlatency - Linux low latency kernel
linux-oracle - Linux kernel for Oracle Cloud systems
linux-raspi - Linux kernel for Raspberry Pi systems

Details

It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel did not properly perform filter deactivation in some
situations. A local attacker could possibly use this to gain elevated
privileges. Please note that with the fix for this CVE, kernel support for
the TCINDEX classifier has been removed. (CVE-2023-1829)

It was discovered that the OverlayFS implementation in the Linux kernel did
not properly handle copy up operation in some conditions. A local attacker
could possibly use this to gain elevated privileges. (CVE-2023-0386)

OSVersionArchitecturePackageVersionFilename
Ubuntu22.10noarchlinux-image-5.19.0-41-generic-64k< 5.19.0-41.42UNKNOWN
Ubuntu22.10noarchlinux-image-5.19.0-41-generic< 5.19.0-41.42UNKNOWN
Ubuntu22.10noarchlinux-image-5.19.0-41-generic-dbgsym< 5.19.0-41.42UNKNOWN
Ubuntu22.10noarchlinux-image-virtual< 5.19.0.41.37UNKNOWN
Ubuntu22.10noarchlinux-cloud-tools-generic< 5.19.0.41.37UNKNOWN
Ubuntu22.10noarchlinux-cloud-tools-generic-hwe-22.04< 5.19.0.41.37UNKNOWN
Ubuntu22.10noarchlinux-cloud-tools-generic-hwe-22.04-edge< 5.19.0.41.37UNKNOWN
Ubuntu22.10noarchlinux-cloud-tools-virtual< 5.19.0.41.37UNKNOWN
Ubuntu22.10noarchlinux-cloud-tools-virtual-hwe-22.04< 5.19.0.41.37UNKNOWN
Ubuntu22.10noarchlinux-cloud-tools-virtual-hwe-22.04-edge< 5.19.0.41.37UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	22.10	noarch	linux-image-5.19.0-41-generic-64k	< 5.19.0-41.42	UNKNOWN
Ubuntu	22.10	noarch	linux-image-5.19.0-41-generic	< 5.19.0-41.42	UNKNOWN
Ubuntu	22.10	noarch	linux-image-5.19.0-41-generic-dbgsym	< 5.19.0-41.42	UNKNOWN
Ubuntu	22.10	noarch	linux-image-virtual	< 5.19.0.41.37	UNKNOWN
Ubuntu	22.10	noarch	linux-cloud-tools-generic	< 5.19.0.41.37	UNKNOWN
Ubuntu	22.10	noarch	linux-cloud-tools-generic-hwe-22.04	< 5.19.0.41.37	UNKNOWN
Ubuntu	22.10	noarch	linux-cloud-tools-generic-hwe-22.04-edge	< 5.19.0.41.37	UNKNOWN
Ubuntu	22.10	noarch	linux-cloud-tools-virtual	< 5.19.0.41.37	UNKNOWN
Ubuntu	22.10	noarch	linux-cloud-tools-virtual-hwe-22.04	< 5.19.0.41.37	UNKNOWN
Ubuntu	22.10	noarch	linux-cloud-tools-virtual-hwe-22.04-edge	< 5.19.0.41.37	UNKNOWN