Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:USN-6828-1
HistoryJun 11, 2024 - 5:45 p.m.

linux-intel-iotg-5.15 vulnerabilities

2024-06-1117:45:43
Google
osv.dev
1
broadcom wlan driver
race condition
use-after-free
denial of service
ata over ethernet driver
atheros wireless driver
null pointer dereference
hugetlb file system
open vswitch implementation
stack overflow
intel processors
bluetooth rfcomm protocol
rds protocol
out-of-bounds read
security issues
subsystems
arm32
powerpc
risc-v
s390
x86
block layer
acpi drivers
android drivers
power management
bus devices
cryptographic api
network drivers
nvme drivers
usb subsystem
file systems
bpf subsystem
memory management
netfilter
tls protocol
bluetooth subsystem
ethernet bridge
can network
networking core

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux
kernel contained a race condition, leading to a use-after-free
vulnerability. An attacker could use this to cause a denial of service or
possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not
properly validate certain data structures, leading to a NULL pointer
dereference. An attacker could possibly use this to cause a denial of
service. (CVE-2023-7042)

It was discovered that the HugeTLB file system component of the Linux
Kernel contained a NULL pointer dereference vulnerability. A privileged
attacker could possibly use this to to cause a denial of service.
(CVE-2024-0841)

It was discovered that the Open vSwitch implementation in the Linux kernel
could overflow its stack during recursive action operations under certain
conditions. A local attacker could use this to cause a denial of service
(system crash). (CVE-2024-1151)

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida
discovered that the Linux kernel mitigations for the initial Branch History
Injection vulnerability (CVE-2022-0001) were insufficient for Intel
processors. A local attacker could potentially use this to expose sensitive
information. (CVE-2024-2201)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux
Kernel contained a race condition, leading to a NULL pointer dereference.
An attacker could possibly use this to cause a denial of service (system
crash). (CVE-2024-22099)

Chenyuan Yang discovered that the RDS Protocol implementation in the Linux
kernel contained an out-of-bounds read vulnerability. An attacker could use
this to possibly cause a denial of service (system crash). (CVE-2024-23849)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Core kernel;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Android drivers;
  • Power management core;
  • Bus devices;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • PCI driver for MicroSemi Switchtec;
  • PHY drivers;
  • MediaTek PM domains;
  • Power supply drivers;
  • SCSI drivers;
  • SPI subsystem;
  • Media staging drivers;
  • TCM subsystem;
  • USB subsystem;
  • DesignWare USB3 driver;
  • Framebuffer layer;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • Network file system client;
  • NILFS2 file system;
  • NTFS3 file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • BPF subsystem;
  • Memory management;
  • Netfilter;
  • TLS protocol;
  • io_uring subsystem;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • L2TP protocol;
  • Logical Link layer;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netlink;
  • NET/ROM layer;
  • NFC subsystem;
  • Packet sockets;
  • RDS protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • Unix domain sockets;
  • Wireless networking;
  • Tomoyo security module;
  • Realtek audio codecs;
  • USB sound devices;
    (CVE-2024-26910, CVE-2024-27074, CVE-2023-52494, CVE-2023-52594,
    CVE-2024-26915, CVE-2024-26766, CVE-2023-52489, CVE-2024-35845,
    CVE-2024-26846, CVE-2024-26898, CVE-2024-26897, CVE-2024-26826,
    CVE-2024-26798, CVE-2023-52662, CVE-2024-26856, CVE-2023-52608,
    CVE-2024-26782, CVE-2024-27047, CVE-2024-27390, CVE-2024-26610,
    CVE-2024-26804, CVE-2023-52638, CVE-2024-26771, CVE-2024-26752,
    CVE-2024-26585, CVE-2024-26645, CVE-2024-26715, CVE-2024-27028,
    CVE-2024-26809, CVE-2024-26880, CVE-2024-27432, CVE-2024-27065,
    CVE-2024-26717, CVE-2023-52616, CVE-2024-26748, CVE-2024-26795,
    CVE-2024-26671, CVE-2024-26743, CVE-2024-27412, CVE-2024-26802,
    CVE-2024-26733, CVE-2024-26736, CVE-2023-52618, CVE-2024-27046,
    CVE-2024-26688, CVE-2024-26679, CVE-2024-26769, CVE-2024-27051,
    CVE-2024-26603, CVE-2024-26744, CVE-2023-52434, CVE-2024-26697,
    CVE-2024-27075, CVE-2023-52583, CVE-2024-26583, CVE-2024-27403,
    CVE-2024-26907, CVE-2024-26636, CVE-2024-27410, CVE-2023-52530,
    CVE-2024-26840, CVE-2024-26851, CVE-2024-26862, CVE-2023-52640,
    CVE-2024-35829, CVE-2024-26906, CVE-2024-26777, CVE-2024-27419,
    CVE-2024-26664, CVE-2024-26627, CVE-2024-26859, CVE-2023-52486,
    CVE-2023-52652, CVE-2024-26835, CVE-2024-35844, CVE-2024-26702,
    CVE-2024-26635, CVE-2024-26704, CVE-2023-52633, CVE-2024-26816,
    CVE-2024-26894, CVE-2024-26778, CVE-2023-52599, CVE-2024-35828,
    CVE-2024-26776, CVE-2023-52493, CVE-2024-26845, CVE-2024-26594,
    CVE-2024-26885, CVE-2024-26829, CVE-2023-52645, CVE-2024-26695,
    CVE-2023-52615, CVE-2024-26651, CVE-2024-26843, CVE-2023-52606,
    CVE-2024-26675, CVE-2024-26874, CVE-2024-26883, CVE-2024-26772,
    CVE-2024-26673, CVE-2024-26737, CVE-2023-52631, CVE-2024-26640,
    CVE-2023-52598, CVE-2024-26735, CVE-2024-26895, CVE-2024-26592,
    CVE-2023-52492, CVE-2024-26861, CVE-2023-52644, CVE-2024-26920,
    CVE-2024-26877, CVE-2024-26863, CVE-2024-26720, CVE-2024-26722,
    CVE-2024-27045, CVE-2024-27038, CVE-2024-26763, CVE-2024-26833,
    CVE-2024-27417, CVE-2024-26916, CVE-2024-26857, CVE-2024-26875,
    CVE-2024-26606, CVE-2024-27024, CVE-2024-26615, CVE-2023-52614,
    CVE-2023-52641, CVE-2024-26600, CVE-2024-27043, CVE-2023-52635,
    CVE-2024-26787, CVE-2024-26622, CVE-2024-27413, CVE-2024-26791,
    CVE-2023-52622, CVE-2023-52491, CVE-2023-52604, CVE-2024-27037,
    CVE-2024-26881, CVE-2024-26754, CVE-2024-26659, CVE-2024-26663,
    CVE-2024-26747, CVE-2023-52602, CVE-2024-26712, CVE-2024-26839,
    CVE-2024-26749, CVE-2024-26764, CVE-2024-26820, CVE-2024-26882,
    CVE-2024-27039, CVE-2024-27078, CVE-2024-26889, CVE-2024-26870,
    CVE-2024-26788, CVE-2024-26602, CVE-2024-26903, CVE-2024-27044,
    CVE-2024-27073, CVE-2023-52601, CVE-2023-52595, CVE-2024-26707,
    CVE-2024-27415, CVE-2023-52637, CVE-2024-26660, CVE-2024-27414,
    CVE-2024-27054, CVE-2023-52497, CVE-2024-26801, CVE-2023-52435,
    CVE-2023-52620, CVE-2023-52627, CVE-2024-26698, CVE-2023-52597,
    CVE-2024-27077, CVE-2023-52650, CVE-2024-26750, CVE-2024-26852,
    CVE-2024-27053, CVE-2023-52656, CVE-2024-26625, CVE-2024-26779,
    CVE-2024-27431, CVE-2024-26751, CVE-2024-26684, CVE-2024-26803,
    CVE-2024-26593, CVE-2023-52642, CVE-2023-52447, CVE-2024-26790,
    CVE-2024-26825, CVE-2024-26668, CVE-2023-52607, CVE-2024-26872,
    CVE-2024-27030, CVE-2023-52643, CVE-2024-26901, CVE-2024-35830,
    CVE-2024-26855, CVE-2023-52588, CVE-2023-52587, CVE-2024-26891,
    CVE-2024-26644, CVE-2024-26884, CVE-2024-26793, CVE-2024-26805,
    CVE-2024-26584, CVE-2024-27405, CVE-2023-52623, CVE-2024-26608,
    CVE-2024-26878, CVE-2024-27388, CVE-2024-27416, CVE-2024-26685,
    CVE-2024-27034, CVE-2024-26879, CVE-2024-26614, CVE-2024-26792,
    CVE-2023-52617, CVE-2024-26773, CVE-2024-26665, CVE-2024-26641,
    CVE-2023-52619, CVE-2024-35811, CVE-2024-27052, CVE-2024-27076,
    CVE-2024-26838, CVE-2024-26808, CVE-2024-26696, CVE-2024-26676,
    CVE-2024-26689, CVE-2024-26774, CVE-2024-26601, CVE-2023-52498,
    CVE-2024-27436)

References

Related

osv 33
openvas 41
nessus 76
ubuntu 23
debian 2
slackware 1
photon 1
fedora 4
redhatcve 2
ubuntucve 4
oraclelinux 1
cvelist 2
cve 2
nvd 2
debiancve 2
amazon 2
cert 1
osv
osv
linux, linux-gcp, linux-gcp-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-xilinx-zynqmp vulnerabilities
2024-06-07 22:40:36
linux-gkeop, linux-gkeop-5.15, linux-kvm vulnerabilities
2024-06-10 17:13:01
linux-aws, linux-aws-5.15 vulnerabilities
2024-06-11 20:53:02
openvas
openvas
Ubuntu: Security Advisory (USN-6821-1)
2024-06-10 00:00:00
Ubuntu: Security Advisory (USN-6820-1)
2024-06-10 00:00:00
Ubuntu: Security Advisory (USN-6820-2)
2024-06-12 00:00:00
nessus
nessus
Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6821-1)
2024-06-07 00:00:00
Ubuntu 22.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6821-4)
2024-06-14 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6820-1)
2024-06-07 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2024-05-15 00:00:00
Linux kernel vulnerabilities
2024-05-07 00:00:00
Linux kernel vulnerabilities
2024-06-10 00:00:00
debian
debian
[SECURITY] [DSA 5681-1] linux security update
2024-05-06 18:31:39
[SECURITY] [DSA 5658-1] linux security update
2024-04-13 06:38:27
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2024-06-05 19:11:11
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0738
2024-03-19 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: kernel-6.7.6-100.fc38
2024-02-28 01:41:53
[SECURITY] Fedora 39 Update: kernel-6.7.6-200.fc39
2024-02-28 01:11:21
[SECURITY] Fedora 39 Update: kernel-6.7.9-200.fc39
2024-03-13 01:25:42
redhatcve
redhatcve
CVE-2024-35811
2024-05-18 00:11:01
CVE-2024-26898
2024-04-17 17:53:45
ubuntucve
ubuntucve
CVE-2024-35811
2024-05-17 00:00:00
CVE-2024-26898
2024-04-17 00:00:00
CVE-2023-52604
2024-03-06 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2024-04-08 00:00:00
cvelist
cvelist
CVE-2024-35811 wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
2024-05-17 13:23:17
CVE-2024-26898 aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
2024-04-17 10:27:48
cve
cve
CVE-2024-35811
2024-05-17 14:15:15
CVE-2024-26898
2024-04-17 11:15:10
nvd
nvd
CVE-2024-35811
2024-05-17 14:15:15
CVE-2024-26898
2024-04-17 11:15:10
debiancve
debiancve
CVE-2024-35811
2024-05-17 14:15:15
CVE-2024-26898
2024-04-17 11:15:10
amazon
amazon
Important: kernel
2024-02-28 23:54:00
Medium: kernel
2024-05-23 22:04:00
cert
cert
Linux kernel on Intel systems is susceptible to Spectre v2 attacks
2024-04-09 00:00:00

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON
Related for OSV:USN-6828-1
osv33openvas41nessus76ubuntu23debian2slackware1photon1fedora4redhatcve2ubuntucve4oraclelinux1cvelist2cve2nvd2debiancve2amazon2cert1