Lucene search

UbuntuUSN-6465-1

HistoryOct 31, 2023 - 12:00 a.m.

Linux kernel vulnerabilities

2023-10-3100:00:00

ubuntu.com

ubuntu

linux kernel

aws

azure

microsoft

google cloud

ibm

oracle

cve-2023-31083

cve-2023-3772

bluetooth

netlink transformation

race condition

null pointer

denial of service

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 22.04 LTS
Ubuntu 20.04 LTS

Packages

linux - Linux kernel
linux-aws - Linux kernel for Amazon Web Services (AWS) systems
linux-aws-5.15 - Linux kernel for Amazon Web Services (AWS) systems
linux-azure - Linux kernel for Microsoft Azure Cloud systems
linux-azure-5.15 - Linux kernel for Microsoft Azure cloud systems
linux-azure-fde - Linux kernel for Microsoft Azure CVM cloud systems
linux-azure-fde-5.15 - Linux kernel for Microsoft Azure CVM cloud systems
linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
linux-gcp-5.15 - Linux kernel for Google Cloud Platform (GCP) systems
linux-gkeop - Linux kernel for Google Container Engine (GKE) systems
linux-gkeop-5.15 - Linux kernel for Google Container Engine (GKE) systems
linux-hwe-5.15 - Linux hardware enablement (HWE) kernel
linux-ibm - Linux kernel for IBM cloud systems
linux-ibm-5.15 - Linux kernel for IBM cloud systems
linux-kvm - Linux kernel for cloud environments
linux-lowlatency - Linux low latency kernel
linux-lowlatency-hwe-5.15 - Linux low latency kernel
linux-nvidia - Linux kernel for NVIDIA systems
linux-oracle - Linux kernel for Oracle Cloud systems
linux-oracle-5.15 - Linux kernel for Oracle Cloud systems

Details

Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in
the Linux kernel contained a race condition, leading to a null pointer
dereference vulnerability. A local attacker could use this to cause a
denial of service (system crash). (CVE-2023-31083)

Lin Ma discovered that the Netlink Transformation (XFRM) subsystem in the
Linux kernel contained a null pointer dereference vulnerability in some
situations. A local privileged attacker could use this to cause a denial of
service (system crash). (CVE-2023-3772)

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchlinux-image-5.15.0-1032-gkeop< 5.15.0-1032.38UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1032-gkeop-dbgsym< 5.15.0-1032.38UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1040-nvidia< 5.15.0-1040.40UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1040-nvidia-dbgsym< 5.15.0-1040.40UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1040-nvidia-lowlatency< 5.15.0-1040.40UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1040-nvidia-lowlatency-dbgsym< 5.15.0-1040.40UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1042-ibm< 5.15.0-1042.45UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1042-ibm-dbgsym< 5.15.0-1042.45UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1046-gcp< 5.15.0-1046.54UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1046-gcp-dbgsym< 5.15.0-1046.54UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	22.04	noarch	linux-image-5.15.0-1032-gkeop	< 5.15.0-1032.38	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1032-gkeop-dbgsym	< 5.15.0-1032.38	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1040-nvidia	< 5.15.0-1040.40	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1040-nvidia-dbgsym	< 5.15.0-1040.40	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1040-nvidia-lowlatency	< 5.15.0-1040.40	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1040-nvidia-lowlatency-dbgsym	< 5.15.0-1040.40	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1042-ibm	< 5.15.0-1042.45	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1042-ibm-dbgsym	< 5.15.0-1042.45	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1046-gcp	< 5.15.0-1046.54	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1046-gcp-dbgsym	< 5.15.0-1046.54	UNKNOWN