Lucene search

K
osvGoogleOSV:USN-6625-2
HistoryFeb 08, 2024 - 7:42 p.m.

linux-gcp, linux-gcp-5.4 vulnerabilities

2024-02-0819:42:36
Google
osv.dev
3
linux kernel
denial of service
code execution
race condition
out-of-bounds write
null pointer dereference
gcp
5.4 vulnerabilities
xen event channel
renesas ethernet avb driver
nfc controller interface
memory allocation failure

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.1%

Marek Marczykowski-Górecki discovered that the Xen event channel
infrastructure implementation in the Linux kernel contained a race
condition. An attacker in a guest VM could possibly use this to cause a
denial of service (paravirtualized device unavailability). (CVE-2023-34324)

Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver
in the Linux kernel during device removal. A privileged attacker could use
this to cause a denial of service (system crash). (CVE-2023-35827)

It was discovered that a race condition existed in the Linux kernel when
performing operations with kernel objects, leading to an out-of-bounds
write. A local attacker could use this to cause a denial of service (system
crash) or execute arbitrary code. (CVE-2023-45863)

黄思聪 discovered that the NFC Controller Interface (NCI) implementation in
the Linux kernel did not properly handle certain memory allocation failure
conditions, leading to a null pointer dereference vulnerability. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2023-46343)