UBUNTU-CVE-2023-0459
Dashboard / Vulnerabilities / UBUNTU-CVE-2023-0459
UBUNTU-CVE-2023-0459
Summary:
Details: Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47
References: https://ubuntu.com/security/CVE-2023-0459, https://github.com/google/security-research/security/advisories/GHSA-m7j5-797w-vmrh, https://git.kernel.org/linus/74e19ef0ff8061ef55957c3abd71614ef0f42f47, https://ubuntu.com/security/notices/USN-6079-1, https://ubuntu.com/security/notices/USN-6080-1, https://ubuntu.com/security/notices/USN-6081-1, https://ubuntu.com/security/notices/USN-6084-1, https://ubuntu.com/security/notices/USN-6085-1, https://ubuntu.com/security/notices/USN-6090-1, https://ubuntu.com/security/notices/USN-6091-1, https://ubuntu.com/security/notices/USN-6092-1, https://ubuntu.com/security/notices/USN-6094-1, https://ubuntu.com/security/notices/USN-6095-1, https://ubuntu.com/security/notices/USN-6096-1, https://ubuntu.com/security/notices/USN-6109-1, https://ubuntu.com/security/notices/USN-6118-1, https://ubuntu.com/security/notices/USN-6132-1, https://ubuntu.com/security/notices/USN-6133-1, https://ubuntu.com/security/notices/USN-6134-1, https://ubuntu.com/security/notices/USN-6174-1, https://ubuntu.com/security/notices/USN-6222-1, https://ubuntu.com/security/notices/USN-6235-1, https://ubuntu.com/security/notices/USN-6256-1, https://www.cve.org/CVERecord?id=CVE-2023-0459
Affected packages
Package
Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=trusty%2Fesm
Affected ranges
Type: ECOSYSTEM
Events:
