USN-6341-1: Linux kernel vulnerabilities
Publication date
6 September 2023
Overview
Several security issues were fixed in the Linux kernel.
Releases
Packages
- linux - Linux kernel
Details
Jordy Zomer and Alexandra Sandulescu discovered that syscalls invoking the
do_prlimit() function in the Linux kernel did not properly handle
speculative execution barriers. A local attacker could use this to expose
sensitive information (kernel memory). (CVE-2023-0458)
It was discovered that a use-after-free vulnerability existed in the IEEE
1394 (Firewire) implementation in the Linux kernel. A privileged attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2023-3159)
It was discovered that the virtual terminal driver in the Linux kernel
contained a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly expose sensitive
information (kernel memory). (CVE-2023-3567)
It was discovered that the...
Jordy Zomer and Alexandra Sandulescu discovered that syscalls invoking the
do_prlimit() function in the Linux kernel did not properly handle
speculative execution barriers. A local attacker could use this to expose
sensitive information (kernel memory). (CVE-2023-0458)
It was discovered that a use-after-free vulnerability existed in the IEEE
1394 (Firewire) implementation in the Linux kernel. A privileged attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2023-3159)
It was discovered that the virtual terminal driver in the Linux kernel
contained a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly expose sensitive
information (kernel memory). (CVE-2023-3567)
It was discovered that the Quick Fair Queueing network scheduler
implementation in the Linux kernel contained an out-of-bounds write
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-3611)
It was discovered that the network packet classifier with
netfilter/firewall marks implementation in the Linux kernel did not
properly handle reference counting, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-3776)
Update instructions
After a standard system update you need to reboot your computer to make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
Ubuntu Release | Package Version | ||
---|---|---|---|
14.04 trusty | linux-image-3.13.0-193-generic – 3.13.0-193.244 | ||
linux-image-3.13.0-193-lowlatency – 3.13.0-193.244 | |||
linux-image-generic – 3.13.0.193.203 | |||
linux-image-generic-lts-trusty – 3.13.0.193.203 | |||
linux-image-lowlatency – 3.13.0.193.203 | |||
linux-image-server – 3.13.0.193.203 | |||
linux-image-virtual – 3.13.0.193.203 |
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.
References
Related notices
- USN-6397-1
- USN-6385-1
- USN-6357-1
- USN-6348-1
- USN-6346-1
- USN-6342-1
- USN-6342-2
- USN-6332-1
- USN-6331-1
- USN-6330-1
- USN-6397-1
- USN-6385-1
- USN-6357-1
- USN-6348-1
- USN-6346-1
- USN-6342-1
- USN-6342-2
- USN-6332-1
- USN-6331-1
- USN-6330-1
- USN-6329-1
- USN-6328-1
- USN-6327-1
- USN-6325-1
- USN-6324-1
- USN-6321-1
- USN-6318-1
- USN-6317-1
- USN-6315-1
- USN-6309-1
- USN-6285-1
- USN-6256-1
- USN-6254-1
- USN-6222-1
- USN-6134-1
- USN-6096-1
- USN-6093-1
- USN-6091-1
- USN-6079-1
- LSN-0099-1
- LSN-0098-1
Have additional questions?