Ubuntu: Security Advisory (USN-6686-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6680-2: Linux kernel vulnerabilities

黄思聪 discovered that the NFC Controller Interface NCI implementation in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service system crash...

USN-6686-1 linux, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-lowlatency-hwe-5.15, linux-nvidia vulnerabilities

It was discovered that the DesignWare USB3 for Qualcomm SoCs driver in the Linux kernel did not properly handle certain error conditions during device registration. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-22995 It was discovered that a race...

The vulnerabilities of the llcp_sock_connect() and llcp_sock_bind() functions in the NFC subsystem of Linux kernel allow attackers to cause service failures or disclose protected information.

The vulnerability of the llcpsockconnect and llcpsockbind functions in the NFC subsystem of Linux kernel is related to the use of memory after it is freed, resulting in the same object being assigned to two different sockets. Exploiting this vulnerability can allow an attacker to cause a service...

SUSE CVE-2023-52502

In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfcllcpsockget and nfcllcpsockgetsn Sili Luo reported a race in nfcllcpsockget, leading to UAF. Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the...

CVE-2023-52524

A flaw was found in the net:nfc:llcp component in the Linux kernel that could allow for potential data corruption when the device list is accessed and modified, as there are no locks present to avoid concurrent modifications. Mitigation Mitigation for this issue is either not available or the...

CVE-2023-52502

A use-after-free vulnerability was found in the Linux kernel in the net:nfc component and is caused by a race condition in the nfcllcpsockget function. This flaw could lead to memory corruption, crashes, or potential exploitation by attackers of privileged memory. Mitigation Mitigation for this...

CVE-2023-52507

An out-of-bounds vulnerability was found in the Linux kernel. This issue occurs due to an inadequate validation of the NFC protocol identifier, which uses bit masks to check protocol support. If the protocol value is too large, it can lead to out-of-bounds memory access due to bit shifts, causing...

openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:3600-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-52524

In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated lock held when modifying it, or the list could become corrupted, as syzbot discovered...

DEBIAN-CVE-2023-52524

In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated lock held when modifying it, or the list could become corrupted, as syzbot discovered...

CVE-2023-52507

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determine if the protocol is supported. Assert the provided protocol is less than the maximum defined so it doesn't potentially perform a...

CVE-2023-52502

In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfcllcpsockget and nfcllcpsockgetsn Sili Luo reported a race in nfcllcpsockget, leading to UAF. Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the...

DEBIAN-CVE-2023-52502

In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfcllcpsockget and nfcllcpsockgetsn Sili Luo reported a race in nfcllcpsockget, leading to UAF. Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the...

DEBIAN-CVE-2023-52507

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determine if the protocol is supported. Assert the provided protocol is less than the maximum defined so it doesn't potentially perform a...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated lock held when modifying it, or the list could become corrupted, as syzbot discovered...

Design/Logic Flaw

In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfcllcpsockget and nfcllcpsockgetsn Sili Luo reported a race in nfcllcpsockget, leading to UAF. Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determine if the protocol is supported. Assert the provided protocol is less than the maximum defined so it doesn't potentially perform a...

CVE-2023-52507

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determine if the protocol is supported. Assert the provided protocol is less than the maximum defined so it doesn't potentially perform a...

CVE-2023-52502

In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfcllcpsockget and nfcllcpsockgetsn Sili Luo reported a race in nfcllcpsockget, leading to UAF. Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the...