UbuntuUSN-6122-1Linux kernel (OEM) vulnerabilities
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.5 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
Releases
- Ubuntu 22.04 LTS
Packages
- linux-oem-6.1 - Linux kernel for OEM systems
Details
Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in
the netfilter subsystem of the Linux kernel when processing batch requests,
leading to a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2023-32233)
Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu
Linux kernel contained a race condition when handling inode locking in some
situations. A local attacker could use this to cause a denial of service
(kernel deadlock). (CVE-2023-2612)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 22.04 | noarch | linux-image-6.1.0-1013-oem | < 6.1.0-1013.13 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-image-6.1.0-1013-oem-dbgsym | < 6.1.0-1013.13 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-image-oem-22.04c | < 6.1.0.1013.13 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-headers-oem-22.04c | < 6.1.0.1013.13 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-modules-ipu6-oem-22.04c | < 6.1.0.1013.13 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-modules-ivsc-oem-22.04c | < 6.1.0.1013.13 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-modules-iwlwifi-oem-22.04c | < 6.1.0.1013.13 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-oem-22.04c | < 6.1.0.1013.13 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-tools-oem-22.04c | < 6.1.0.1013.13 | UNKNOWN |
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.5 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%