==========================================================================
\nUbuntu Security Notice USN-6013-1
\nApril 12, 2023<\/p>\n
linux-aws vulnerabilities
\n==========================================================================<\/p>\n
A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n
– Ubuntu 14.04 ESM<\/p>\n
Summary:<\/p>\n
Several security issues were fixed in the Linux kernel.<\/p>\n
Software Description:
\n– linux-aws: Linux kernel for Amazon Web Services (AWS) systems<\/p>\n
Details:<\/p>\n
Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP
\nimplementation in the Linux kernel did not properly handle IPID assignment.
\nA remote attacker could use this to cause a denial of service (connection
\ntermination) or inject forged data. (CVE-2020-36516)<\/p>\n
Ke Sun, Alyssa Milburn, Henrique Kawakami, Emma Benoit, Igor Chervatyuk,
\nLisa Aichele, and Thais Moreira Hamasaki discovered that the Spectre
\nVariant 2 mitigations for AMD processors on Linux were insufficient in some
\nsituations. A local attacker could possibly use this to expose sensitive
\ninformation. (CVE-2021-26401)<\/p>\n
J\u00fcrgen Gro\u00df discovered that the Xen subsystem within the Linux kernel did
\nnot adequately limit the number of events driver domains (unprivileged PV
\nbackends) could send to other guest VMs. An attacker in a driver domain
\ncould use this to cause a denial of service in other guest VMs.
\n(CVE-2021-28712, CVE-2021-28713)<\/p>\n
Wolfgang Frisch discovered that the ext4 file system implementation in the
\nLinux kernel contained an integer overflow when handling metadata inode
\nextents. An attacker could use this to construct a malicious ext4 file
\nsystem image that, when mounted, could cause a denial of service (system
\ncrash). (CVE-2021-3428)<\/p>\n
It was discovered that the IEEE 802.15.4 wireless network subsystem in the
\nLinux kernel did not properly handle certain error conditions, leading to a
\nnull pointer dereference vulnerability. A local attacker could possibly use
\nthis to cause a denial of service (system crash). (CVE-2021-3659)<\/p>\n
It was discovered that the System V IPC implementation in the Linux kernel
\ndid not properly handle large shared memory counts. A local attacker could
\nuse this to cause a denial of service (memory exhaustion). (CVE-2021-3669)<\/p>\n
Alois Wohlschlager discovered that the overlay file system in the Linux
\nkernel did not restrict private clones in some situations. An attacker
\ncould use this to expose sensitive information. (CVE-2021-3732)<\/p>\n
It was discovered that the SCTP protocol implementation in the Linux kernel
\ndid not properly verify VTAGs in some situations. A remote attacker could
\npossibly use this to cause a denial of service (connection disassociation).
\n(CVE-2021-3772)<\/p>\n
It was discovered that the btrfs file system implementation in the Linux
\nkernel did not properly handle locking in certain error conditions. A local
\nattacker could use this to cause a denial of service (kernel deadlock).
\n(CVE-2021-4149)<\/p>\n
Jann Horn discovered that the socket subsystem in the Linux kernel
\ncontained a race condition when handling listen() and connect() operations,
\nleading to a read-after-free vulnerability. A local attacker could use this
\nto cause a denial of service (system crash) or possibly expose sensitive
\ninformation. (CVE-2021-4203)<\/p>\n
It was discovered that the file system quotas implementation in the Linux
\nkernel did not properly validate the quota block number. An attacker could
\nuse this to construct a malicious file system image that, when mounted and
\noperated on, could cause a denial of service (system crash).
\n(CVE-2021-45868)<\/p>\n
Zhihua Yao discovered that the MOXART SD\/MMC driver in the Linux kernel did
\nnot properly handle device removal, leading to a use-after-free
\nvulnerability. A physically proximate attacker could possibly use this to
\ncause a denial of service (system crash). (CVE-2022-0487)<\/p>\n
It was discovered that the block layer subsystem in the Linux kernel did
\nnot properly initialize memory in some situations. A privileged local
\nattacker could use this to expose sensitive information (kernel memory).
\n(CVE-2022-0494)<\/p>\n
It was discovered that the UDF file system implementation in the Linux
\nkernel could attempt to dereference a null pointer in some situations. An
\nattacker could use this to construct a malicious UDF image that, when
\nmounted and operated on, could cause a denial of service (system crash).
\n(CVE-2022-0617)<\/p>\n
David Bouman discovered that the netfilter subsystem in the Linux kernel
\ndid not initialize memory in some situations. A local attacker could use
\nthis to expose sensitive information (kernel memory). (CVE-2022-1016)<\/p>\n
It was discovered that the implementation of the 6pack and mkiss protocols
\nin the Linux kernel did not handle detach events properly in some
\nsituations, leading to a use-after-free vulnerability. A local attacker
\ncould possibly use this to cause a denial of service (system crash).
\n(CVE-2022-1195)<\/p>\n
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol
\nimplementation in the Linux kernel, leading to use-after-free
\nvulnerabilities. A local attacker could possibly use this to cause a denial
\nof service (system crash). (CVE-2022-1205)<\/p>\n
It was discovered that the tty subsystem in the Linux kernel contained a
\nrace condition in certain situations, leading to an out-of-bounds read
\nvulnerability. A local attacker could possibly use this to cause a denial
\nof service (system crash) or expose sensitive information. (CVE-2022-1462)<\/p>\n
It was discovered that the implementation of X.25 network protocols in the
\nLinux kernel did not terminate link layer sessions properly. A local
\nattacker could possibly use this to cause a denial of service (system
\ncrash). (CVE-2022-1516)<\/p>\n
Duoming Zhou discovered a race condition in the NFC subsystem in the Linux
\nkernel, leading to a use-after-free vulnerability. A privileged local
\nattacker could use this to cause a denial of service (system crash) or
\npossibly execute arbitrary code. (CVE-2022-1974)<\/p>\n
Duoming Zhou discovered that the NFC subsystem in the Linux kernel did not
\nproperly prevent context switches from occurring during certain atomic
\ncontext operations. A privileged local attacker could use this to cause a
\ndenial of service (system crash). (CVE-2022-1975)<\/p>\n
It was discovered that the HID subsystem in the Linux kernel did not
\nproperly validate inputs in certain conditions. A local attacker with
\nphysical access could plug in a specially crafted USB device to expose
\nsensitive information. (CVE-2022-20132)<\/p>\n
It was discovered that the device-mapper verity (dm-verity) driver in the
\nLinux kernel did not properly verify targets being loaded into the device-
\nmapper table. A privileged attacker could use this to cause a denial of
\nservice (system crash) or possibly execute arbitrary code. (CVE-2022-20572,
\nCVE-2022-2503)<\/p>\n
Duoming Zhou discovered that race conditions existed in the timer handling
\nimplementation of the Linux kernel’s Rose X.25 protocol layer, resulting in
\nuse-after-free vulnerabilities. A local attacker could use this to cause a
\ndenial of service (system crash). (CVE-2022-2318)<\/p>\n
Zheyu Ma discovered that the Silicon Motion SM712 framebuffer driver in the
\nLinux kernel did not properly handle very small reads. A local attacker
\ncould use this to cause a denial of service (system crash). (CVE-2022-2380)<\/p>\n
David Leadbeater discovered that the netfilter IRC protocol tracking
\nimplementation in the Linux Kernel incorrectly handled certain message
\npayloads in some situations. A remote attacker could possibly use this to
\ncause a denial of service or bypass firewall filtering. (CVE-2022-2663)<\/p>\n
Lucas Leong discovered that the LightNVM subsystem in the Linux kernel did
\nnot properly handle data lengths in certain situations. A privileged
\nattacker could use this to cause a denial of service (system crash) or
\npossibly execute arbitrary code. (CVE-2022-2991)<\/p>\n
It was discovered that the Intel 740 frame buffer driver in the Linux
\nkernel contained a divide by zero vulnerability. A local attacker could use
\nthis to cause a denial of service (system crash). (CVE-2022-3061)<\/p>\n
Jiasheng Jiang discovered that the wm8350 charger driver in the Linux
\nkernel did not properly deallocate memory, leading to a null pointer
\ndereference vulnerability. A local attacker could use this to cause a
\ndenial of service (system crash). (CVE-2022-3111)<\/p>\n
It was discovered that the sound subsystem in the Linux kernel contained a
\nrace condition in some situations. A local attacker could use this to cause
\na denial of service (system crash). (CVE-2022-3303)<\/p>\n
It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux
\nkernel did not properly perform bounds checking in some situations. A
\nphysically proximate attacker could use this to craft a malicious USB
\ndevice that when inserted, could cause a denial of service (system crash)
\nor possibly execute arbitrary code. (CVE-2022-3628)<\/p>\n
Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux
\nkernel contained an out-of-bounds write vulnerability. A local attacker
\ncould use this to cause a denial of service (system crash).
\n(CVE-2022-36280)<\/p>\n
It was discovered that the NILFS2 file system implementation in the Linux
\nkernel did not properly deallocate memory in certain error conditions. An
\nattacker could use this to cause a denial of service (memory exhaustion).
\n(CVE-2022-3646)<\/p>\n
It was discovered that the Netlink Transformation (XFRM) subsystem in the
\nLinux kernel contained a reference counting error. A local attacker could
\nuse this to cause a denial of service (system crash). (CVE-2022-36879)<\/p>\n
It was discovered that the infrared transceiver USB driver did not properly
\nhandle USB control messages. A local attacker with physical access could
\nplug in a specially crafted USB device to cause a denial of service (memory
\nexhaustion). (CVE-2022-3903)<\/p>\n
Jann Horn discovered a race condition existed in the Linux kernel when
\nunmapping VMAs in certain situations, resulting in possible use-after-free
\nvulnerabilities. A local attacker could possibly use this to cause a denial
\nof service (system crash) or execute arbitrary code. (CVE-2022-39188)<\/p>\n
Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel did not
\nproperly perform reference counting in some situations, leading to a use-
\nafter-free vulnerability. A local attacker could use this to cause a denial
\nof service (system crash) or possibly execute arbitrary code.
\n(CVE-2022-41218)<\/p>\n
It was discovered that a race condition existed in the SMSC UFX USB driver
\nimplementation in the Linux kernel, leading to a use-after-free
\nvulnerability. A physically proximate attacker could use this to cause a
\ndenial of service (system crash) or possibly execute arbitrary code.
\n(CVE-2022-41849)<\/p>\n
It was discovered that a race condition existed in the Roccat HID driver in
\nthe Linux kernel, leading to a use-after-free vulnerability. A local
\nattacker could use this to cause a denial of service (system crash) or
\npossibly execute arbitrary code. (CVE-2022-41850)<\/p>\n
It was discovered that the USB core subsystem in the Linux kernel did not
\nproperly handle nested reset events. A local attacker with physical access
\ncould plug in a specially crafted USB device to cause a denial of service
\n(kernel deadlock). (CVE-2022-4662)<\/p>\n
It was discovered that the network queuing discipline implementation in the
\nLinux kernel contained a null pointer dereference in some situations. A
\nlocal attacker could use this to cause a denial of service (system crash).
\n(CVE-2022-47929)<\/p>\n
Kyle Zeng discovered that the IPv6 implementation in the Linux kernel
\ncontained a NULL pointer dereference vulnerability in certain situations. A
\nlocal attacker could use this to cause a denial of service (system crash).
\n(CVE-2023-0394)<\/p>\n
It was discovered that a memory leak existed in the SCTP protocol
\nimplementation in the Linux kernel. A local attacker could use this to
\ncause a denial of service (memory exhaustion). (CVE-2023-1074)<\/p>\n
Mingi Cho discovered that the netfilter subsystem in the Linux kernel did
\nnot properly initialize a data structure, leading to a null pointer
\ndereference vulnerability. An attacker could use this to cause a denial of
\nservice (system crash). (CVE-2023-1095)<\/p>\n
Kyle Zeng discovered that the ATM VC queuing discipline implementation in
\nthe Linux kernel contained a type confusion vulnerability in some
\nsituations. An attacker could use this to cause a denial of service (system
\ncrash). (CVE-2023-23455)<\/p>\n
Lianhui Tang discovered that the MPLS implementation in the Linux kernel
\ndid not properly handle certain sysctl allocation failure conditions,
\nleading to a double-free vulnerability. An attacker could use this to cause
\na denial of service or possibly execute arbitrary code. (CVE-2023-26545)<\/p>\n
It was discovered that the NTFS file system implementation in the Linux
\nkernel did not properly validate attributes in certain situations, leading
\nto an out-of-bounds read vulnerability. A local attacker could possibly use
\nthis to expose sensitive information (kernel memory). (CVE-2023-26607)<\/p>\n
Duoming Zhou discovered that a race condition existed in the infrared
\nreceiver\/transceiver driver in the Linux kernel, leading to a use-after-
\nfree vulnerability. A privileged attacker could use this to cause a denial
\nof service (system crash) or possibly execute arbitrary code.
\n(CVE-2023-1118)<\/p>\n
Update instructions:<\/p>\n
The problem can be corrected by updating your system to the following
\npackage versions:<\/p>\n
Ubuntu 14.04 ESM:
\nlinux-image-4.4.0-1117-aws 4.4.0-1117.123
\nlinux-image-aws 4.4.0.1117.114<\/p>\n
After a standard system update you need to reboot your computer to make
\nall the necessary changes.<\/p>\n
ATTENTION: Due to an unavoidable ABI change the kernel updates have
\nbeen given a new version number, which requires you to recompile and
\nreinstall all third party kernel modules you might have installed.
\nUnless you manually uninstalled the standard kernel metapackages
\n(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
\nlinux-powerpc), a standard system upgrade will automatically perform
\nthis as well.<\/p>\n
References:
\nhttps:\/\/ubuntu.com\/security\/notices\/USN-6013-1
\nCVE-2020-36516, CVE-2021-26401, CVE-2021-28712, CVE-2021-28713,
\nCVE-2021-3428, CVE-2021-3659, CVE-2021-3669, CVE-2021-3732,
\nCVE-2021-3772, CVE-2021-4149, CVE-2021-4203, CVE-2021-45868,
\nCVE-2022-0487, CVE-2022-0494, CVE-2022-0617, CVE-2022-1016,
\nCVE-2022-1195, CVE-2022-1205, CVE-2022-1462, CVE-2022-1516,
\nCVE-2022-1974, CVE-2022-1975, CVE-2022-20132, CVE-2022-20572,
\nCVE-2022-2318, CVE-2022-2380, CVE-2022-2503, CVE-2022-2663,
\nCVE-2022-2991, CVE-2022-3061, CVE-2022-3111, CVE-2022-3303,
\nCVE-2022-3628, CVE-2022-36280, CVE-2022-3646, CVE-2022-36879,
\nCVE-2022-3903, CVE-2022-39188, CVE-2022-41218, CVE-2022-41849,
\nCVE-2022-41850, CVE-2022-4662, CVE-2022-47929, CVE-2023-0394,
\nCVE-2023-1074, CVE-2023-1095, CVE-2023-1118, CVE-2023-23455,
\nCVE-2023-26545, CVE-2023-26607<\/p>\n","protected":false},"excerpt":{"rendered":"
========================================================================== Ubuntu Security Notice USN-6013-1 April 12, 2023 linux-aws vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 14.04 ESM Summary: Several security issues were fixed in the Linux kernel. Software Description: – linux-aws: Linux kernel for Amazon Web Services (AWS) systems Details: Xuewei Feng, Chuanpu Fu, Qi Li, …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-40331","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/40331","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=40331"}],"version-history":[{"count":1,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/40331\/revisions"}],"predecessor-version":[{"id":40408,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/40331\/revisions\/40408"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=40331"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=40331"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=40331"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}