Lucene search

K
ubuntuUbuntuUSN-6465-2
HistoryNov 01, 2023 - 12:00 a.m.

Linux kernel (Raspberry Pi) vulnerabilities

2023-11-0100:00:00
ubuntu.com
24
linux kernel
raspberry pi
ubuntu 22.04 lts
linux-raspi package
bluetooth
netlink transformation
race condition
null pointer dereference
denial of service
system crash

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

Releases

  • Ubuntu 22.04 LTS

Packages

  • linux-raspi - Linux kernel for Raspberry Pi systems

Details

Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in
the Linux kernel contained a race condition, leading to a null pointer
dereference vulnerability. A local attacker could use this to cause a
denial of service (system crash). (CVE-2023-31083)

Lin Ma discovered that the Netlink Transformation (XFRM) subsystem in the
Linux kernel contained a null pointer dereference vulnerability in some
situations. A local privileged attacker could use this to cause a denial of
service (system crash). (CVE-2023-3772)