CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
71.6%
It was discovered that a race condition existed in the instruction emulator
of the Linux kernel on Arm 64-bit systems. A local attacker could use this
to cause a denial of service (system crash). (CVE-2022-20422)
Wei Chen discovered that a race condition existed in the TIPC protocol
implementation in the Linux kernel, leading to a null pointer dereference
vulnerability. A local attacker could use this to cause a denial of service
(system crash). (CVE-2023-1382)
Jose Oliveira and Rodrigo Branco discovered that the Spectre Variant 2
mitigations with prctl syscall were insufficient in some situations. A
local attacker could possibly use this to expose sensitive information.
(CVE-2023-1998)
Daniele Antonioli discovered that the Secure Simple Pairing and Secure
Connections pairing in the Bluetooth protocol could allow an
unauthenticated user to complete authentication without pairing
credentials. A physically proximate attacker placed between two Bluetooth
devices could use this to subsequently impersonate one of the paired
devices. (CVE-2023-24023)
shanzhulig discovered that the DRM subsystem in the Linux kernel contained
a race condition when performing certain operation while handling driver
unload, leading to a use-after-free vulnerability. A local attacker could
use this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2023-51043)
It was discovered that a race condition existed in the Bluetooth subsystem
of the Linux kernel, leading to a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2023-51779)
It was discovered that the device mapper driver in the Linux kernel did not
properly validate target size during certain memory allocations. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2023-52429, CVE-2024-23851)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 16.04 | noarch | linux-image-4.4.0-1131-kvm | < 4.4.0-1131.141 | UNKNOWN |
Ubuntu | 16.04 | noarch | linux-buildinfo-4.4.0-1093-kvm | < 4.4.0-1093.102 | UNKNOWN |
Ubuntu | 16.04 | noarch | linux-cloud-tools-4.4.0-1093-kvm | < 4.4.0-1093.102 | UNKNOWN |
Ubuntu | 16.04 | noarch | linux-headers-4.4.0-1093-kvm | < 4.4.0-1093.102 | UNKNOWN |
Ubuntu | 16.04 | noarch | linux-image-4.4.0-1093-kvm | < 4.4.0-1093.102 | UNKNOWN |
Ubuntu | 16.04 | noarch | linux-image-4.4.0-1093-kvm-dbgsym | < 4.4.0-1093.102 | UNKNOWN |
Ubuntu | 16.04 | noarch | linux-kvm-cloud-tools-4.4.0-1093 | < 4.4.0-1093.102 | UNKNOWN |
Ubuntu | 16.04 | noarch | linux-kvm-headers-4.4.0-1093 | < 4.4.0-1093.102 | UNKNOWN |
Ubuntu | 16.04 | noarch | linux-kvm-tools-4.4.0-1093 | < 4.4.0-1093.102 | UNKNOWN |
Ubuntu | 16.04 | noarch | linux-modules-4.4.0-1093-kvm | < 4.4.0-1093.102 | UNKNOWN |
ubuntu.com/security/CVE-2019-25162
ubuntu.com/security/CVE-2021-46936
ubuntu.com/security/CVE-2021-46955
ubuntu.com/security/CVE-2021-46966
ubuntu.com/security/CVE-2021-46990
ubuntu.com/security/CVE-2022-20422
ubuntu.com/security/CVE-2023-1382
ubuntu.com/security/CVE-2023-1998
ubuntu.com/security/CVE-2023-24023
ubuntu.com/security/CVE-2023-51043
ubuntu.com/security/CVE-2023-51779
ubuntu.com/security/CVE-2023-52429
ubuntu.com/security/CVE-2023-52445
ubuntu.com/security/CVE-2023-52451
ubuntu.com/security/CVE-2023-52600
ubuntu.com/security/CVE-2023-52603
ubuntu.com/security/CVE-2024-23851