UbuntuUSN-6174-1Linux kernel (OEM) vulnerabilities
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
8.2%
Releases
- Ubuntu 22.04 LTS
Packages
- linux-oem-5.17 - Linux kernel for OEM systems
Details
Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did
not properly implement speculative execution barriers in usercopy functions
in certain situations. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2023-0459)
It was discovered that the Human Interface Device (HID) support driver in
the Linux kernel contained a type confusion vulnerability in some
situations. A local attacker could use this to cause a denial of service
(system crash). (CVE-2023-1073)
It was discovered that the NTFS file system implementation in the Linux
kernel did not properly handle a loop termination condition, leading to an
out-of-bounds read vulnerability. A local attacker could use this to cause
a denial of service (system crash) or possibly expose sensitive
information. (CVE-2023-26606)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 22.04 | noarch | linux-image-oem-22.04 | < 5.17.0.1033.31 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-headers-oem-22.04 | < 5.17.0.1033.31 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-headers-oem-22.04a | < 5.17.0.1033.31 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-image-oem-22.04a | < 5.17.0.1033.31 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-modules-ipu6-oem-22.04 | < 5.17.0.1033.31 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-modules-ipu6-oem-22.04a | < 5.17.0.1033.31 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-modules-ivsc-oem-22.04 | < 5.17.0.1033.31 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-modules-ivsc-oem-22.04a | < 5.17.0.1033.31 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-modules-iwlwifi-oem-22.04 | < 5.17.0.1033.31 | UNKNOWN |
| Ubuntu | 22.04 | noarch | linux-modules-iwlwifi-oem-22.04a | < 5.17.0.1033.31 | UNKNOWN |
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
8.2%