⌘ + K

USN-6051-1

Dashboard / Vulnerabilities / USN-6051-1

USN-6051-1

Published: 1 May 2023Last Modified: 3 Jun 2026

Upstream:

Aliases:

Summary: linux-azure-5.15, linux-azure-fde, linux-kvm vulnerabilities

Details: It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the TCINDEX classifier has been removed. (CVE-2023-1829) It was discovered that a race condition existed in the io_uring subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-1872)

References: https://ubuntu.com/security/notices/USN-6051-1, https://ubuntu.com/security/CVE-2023-1829, https://ubuntu.com/security/CVE-2023-1872

Affected packages

Package

Name: linux-azure-5.15

Purl: pkg:deb/ubuntu/linux-azure-5.15?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM

Events:

Introduced- 0

Fixed -5.15.0-1037.44~20.04.1

Affected versions

5.15.0-1007.8~20.04.1

5.15.0-1008.9~20.04.1

5.15.0-1013.16~20.04.1

5.15.0-1014.17~20.04.1

5.15.0-1017.20~20.04.1

5.15.0-1019.24~20.04.1

5.15.0-1020.25~20.04.1

5.15.0-1021.26~20.04.1

5.15.0-1022.27~20.04.1

5.15.0-1023.29~20.04.1

5.15.0-1029.36~20.04.1

5.15.0-1030.37~20.04.1

5.15.0-1031.38~20.04.1

5.15.0-1033.40~20.04.1

5.15.0-1034.41~20.04.1

5.15.0-1035.42~20.04.1

5.15.0-1036.43~20.04.1

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High