Linux kernel vulnerabilities

Releases

• Ubuntu 22.10
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• linux - Linux kernel
• linux-aws - Linux kernel for Amazon Web Services (AWS) systems
• linux-aws-5.15 - Linux kernel for Amazon Web Services (AWS) systems
• linux-azure - Linux kernel for Microsoft Azure Cloud systems
• linux-azure-5.15 - Linux kernel for Microsoft Azure cloud systems
• linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
• linux-gcp-5.15 - Linux kernel for Google Cloud Platform (GCP) systems
• linux-gke - Linux kernel for Google Container Engine (GKE) systems
• linux-gke-5.15 - Linux kernel for Google Container Engine (GKE) systems
• linux-gkeop - Linux kernel for Google Container Engine (GKE) systems
• linux-hwe-5.15 - Linux hardware enablement (HWE) kernel
• linux-hwe-5.19 - Linux hardware enablement (HWE) kernel
• linux-ibm - Linux kernel for IBM cloud systems
• linux-kvm - Linux kernel for cloud environments
• linux-lowlatency - Linux low latency kernel
• linux-lowlatency-hwe-5.15 - Linux low latency kernel
• linux-oracle - Linux kernel for Oracle Cloud systems
• linux-oracle-5.15 - Linux kernel for Oracle Cloud systems
• linux-raspi - Linux kernel for Raspberry Pi systems

Details

Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in
the netfilter subsystem of the Linux kernel when processing batch requests,
leading to a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2023-32233)

Gwangun Jung discovered that the Quick Fair Queueing scheduler
implementation in the Linux kernel contained an out-of-bounds write
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-31436)

Reima Ishii discovered that the nested KVM implementation for Intel x86
processors in the Linux kernel did not properly validate control registers
in certain situations. An attacker in a guest VM could use this to cause a
denial of service (guest crash). (CVE-2023-30456)

It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux
kernel did not properly perform data buffer size validation in some
situations. A physically proximate attacker could use this to craft a
malicious USB device that when inserted, could cause a denial of service
(system crash) or possibly expose sensitive information. (CVE-2023-1380)

Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu
Linux kernel contained a race condition when handling inode locking in some
situations. A local attacker could use this to cause a denial of service
(kernel deadlock). (CVE-2023-2612)