Linux kernel vulnerabilities

2023-10-3100:00:00

ubuntu.com

ubuntu

linux kernel

aws

azure

microsoft

google cloud

ibm

oracle

cve-2023-31083

cve-2023-3772

bluetooth

netlink transformation

race condition

null pointer

denial of service

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

Releases

Ubuntu 22.04 LTS
Ubuntu 20.04 LTS

Packages

linux - Linux kernel
linux-aws - Linux kernel for Amazon Web Services (AWS) systems
linux-aws-5.15 - Linux kernel for Amazon Web Services (AWS) systems
linux-azure - Linux kernel for Microsoft Azure Cloud systems
linux-azure-5.15 - Linux kernel for Microsoft Azure cloud systems
linux-azure-fde - Linux kernel for Microsoft Azure CVM cloud systems
linux-azure-fde-5.15 - Linux kernel for Microsoft Azure CVM cloud systems
linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
linux-gcp-5.15 - Linux kernel for Google Cloud Platform (GCP) systems
linux-gkeop - Linux kernel for Google Container Engine (GKE) systems
linux-gkeop-5.15 - Linux kernel for Google Container Engine (GKE) systems
linux-hwe-5.15 - Linux hardware enablement (HWE) kernel
linux-ibm - Linux kernel for IBM cloud systems
linux-ibm-5.15 - Linux kernel for IBM cloud systems
linux-kvm - Linux kernel for cloud environments
linux-lowlatency - Linux low latency kernel
linux-lowlatency-hwe-5.15 - Linux low latency kernel
linux-nvidia - Linux kernel for NVIDIA systems
linux-oracle - Linux kernel for Oracle Cloud systems
linux-oracle-5.15 - Linux kernel for Oracle Cloud systems

Details

Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in
the Linux kernel contained a race condition, leading to a null pointer
dereference vulnerability. A local attacker could use this to cause a
denial of service (system crash). (CVE-2023-31083)

Lin Ma discovered that the Netlink Transformation (XFRM) subsystem in the
Linux kernel contained a null pointer dereference vulnerability in some
situations. A local privileged attacker could use this to cause a denial of
service (system crash). (CVE-2023-3772)

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchlinux-image-5.15.0-1032-gkeop< 5.15.0-1032.38UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1032-gkeop-dbgsym< 5.15.0-1032.38UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1040-nvidia< 5.15.0-1040.40UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1040-nvidia-dbgsym< 5.15.0-1040.40UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1040-nvidia-lowlatency< 5.15.0-1040.40UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1040-nvidia-lowlatency-dbgsym< 5.15.0-1040.40UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1042-ibm< 5.15.0-1042.45UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1042-ibm-dbgsym< 5.15.0-1042.45UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1046-gcp< 5.15.0-1046.54UNKNOWN
Ubuntu22.04noarchlinux-image-5.15.0-1046-gcp-dbgsym< 5.15.0-1046.54UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	22.04	noarch	linux-image-5.15.0-1032-gkeop	< 5.15.0-1032.38	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1032-gkeop-dbgsym	< 5.15.0-1032.38	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1040-nvidia	< 5.15.0-1040.40	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1040-nvidia-dbgsym	< 5.15.0-1040.40	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1040-nvidia-lowlatency	< 5.15.0-1040.40	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1040-nvidia-lowlatency-dbgsym	< 5.15.0-1040.40	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1042-ibm	< 5.15.0-1042.45	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1042-ibm-dbgsym	< 5.15.0-1042.45	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1046-gcp	< 5.15.0-1046.54	UNKNOWN
Ubuntu	22.04	noarch	linux-image-5.15.0-1046-gcp-dbgsym	< 5.15.0-1046.54	UNKNOWN