USN-6174-1

Dashboard / Vulnerabilities / USN-6174-1

USN-6174-1

Summary: linux-oem-5.17 vulnerabilities

Details: Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did not properly implement speculative execution barriers in usercopy functions in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2023-0459) It was discovered that the Human Interface Device (HID) support driver in the Linux kernel contained a type confusion vulnerability in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-1073) It was discovered that the NTFS file system implementation in the Linux kernel did not properly handle a loop termination condition, leading to an out-of-bounds read vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-26606)

References: https://ubuntu.com/security/notices/USN-6174-1, https://ubuntu.com/security/CVE-2023-0459, https://ubuntu.com/security/CVE-2023-1073, https://ubuntu.com/security/CVE-2023-26606