==========================================================================
\nUbuntu Security Notice USN-6221-1
\nJuly 12, 2023<\/p>\n
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
\n==========================================================================<\/p>\n
A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n
– Ubuntu 16.04 LTS (Available with Ubuntu Pro)
\n– Ubuntu 14.04 LTS (Available with Ubuntu Pro)<\/p>\n
Summary:<\/p>\n
Several security issues were fixed in the Linux kernel.<\/p>\n
Software Description:
\n– linux: Linux kernel
\n– linux-aws: Linux kernel for Amazon Web Services (AWS) systems
\n– linux-kvm: Linux kernel for cloud environments
\n– linux-lts-xenial: Linux hardware enablement kernel from Xenial for Trusty<\/p>\n
Details:<\/p>\n
It was discovered that a race condition existed in the overlay file system
\nimplementation in the Linux kernel. A local attacker could use this to
\ncause a denial of service (system crash). (CVE-2021-20321)<\/p>\n
It was discovered that the virtual terminal (vt) device implementation in
\nthe Linux kernel contained a race condition in its ioctl handling that led
\nto an out-of-bounds read vulnerability. A local attacker could possibly use
\nthis to expose sensitive information. (CVE-2021-3753)<\/p>\n
It was discovered that the ext4 file system implementation in the Linux
\nkernel contained a use-after-free vulnerability. An attacker could use this
\nto construct a malicious ext4 file system image that, when mounted, could
\ncause a denial of service (system crash). (CVE-2022-1184)<\/p>\n
Pawan Kumar Gupta, Alyssa Milburn, Amit Peled, Shani Rehana, Nir Shildan
\nand Ariel Sabba discovered that some Intel processors with Enhanced
\nIndirect Branch Restricted Speculation (eIBRS) did not properly handle RET
\ninstructions after a VM exits. A local attacker could potentially use this
\nto expose sensitive information. (CVE-2022-26373)<\/p>\n
Johannes Wikner and Kaveh Razavi discovered that for some Intel x86-64
\nprocessors, the Linux kernel’s protections against speculative branch
\ntarget injection attacks were insufficient in some circumstances. A local
\nattacker could possibly use this to expose sensitive information.
\n(CVE-2022-29901)<\/p>\n
It was discovered that the ST NCI NFC driver did not properly handle device
\nremoval events. A physically proximate attacker could use this to cause a
\ndenial of service (system crash). (CVE-2023-1990)<\/p>\n
It was discovered that the btrfs file system implementation in the Linux
\nkernel did not properly handle error conditions in some situations, leading
\nto a use-after-free vulnerability. A local attacker could possibly use this
\nto cause a denial of service (system crash). (CVE-2023-3111)<\/p>\n
Update instructions:<\/p>\n
The problem can be corrected by updating your system to the following
\npackage versions:<\/p>\n
Ubuntu 16.04 LTS (Available with Ubuntu Pro):
\nlinux-image-4.4.0-1121-kvm 4.4.0-1121.131
\nlinux-image-4.4.0-1158-aws 4.4.0-1158.173
\nlinux-image-4.4.0-242-generic 4.4.0-242.276
\nlinux-image-4.4.0-242-lowlatency 4.4.0-242.276
\nlinux-image-aws 4.4.0.1158.162
\nlinux-image-generic 4.4.0.242.248
\nlinux-image-generic-lts-xenial 4.4.0.242.248
\nlinux-image-kvm 4.4.0.1121.118
\nlinux-image-lowlatency 4.4.0.242.248
\nlinux-image-lowlatency-lts-xenial 4.4.0.242.248
\nlinux-image-virtual 4.4.0.242.248
\nlinux-image-virtual-lts-xenial 4.4.0.242.248<\/p>\n
Ubuntu 14.04 LTS (Available with Ubuntu Pro):
\nlinux-image-4.4.0-1120-aws 4.4.0-1120.126
\nlinux-image-4.4.0-242-generic 4.4.0-242.276~14.04.1
\nlinux-image-4.4.0-242-lowlatency 4.4.0-242.276~14.04.1
\nlinux-image-aws 4.4.0.1120.117
\nlinux-image-generic-lts-xenial 4.4.0.242.210
\nlinux-image-lowlatency-lts-xenial 4.4.0.242.210
\nlinux-image-virtual-lts-xenial 4.4.0.242.210<\/p>\n
After a standard system update you need to reboot your computer to make
\nall the necessary changes.<\/p>\n
ATTENTION: Due to an unavoidable ABI change the kernel updates have
\nbeen given a new version number, which requires you to recompile and
\nreinstall all third party kernel modules you might have installed.
\nUnless you manually uninstalled the standard kernel metapackages
\n(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
\nlinux-powerpc), a standard system upgrade will automatically perform
\nthis as well.<\/p>\n
References:
\nhttps:\/\/ubuntu.com\/security\/notices\/USN-6221-1
\nCVE-2021-20321, CVE-2021-3753, CVE-2022-1184, CVE-2022-26373,
\nCVE-2022-29901, CVE-2023-1990, CVE-2023-3111<\/p>\n","protected":false},"excerpt":{"rendered":"
========================================================================== Ubuntu Security Notice USN-6221-1 July 12, 2023 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 16.04 LTS (Available with Ubuntu Pro) – Ubuntu 14.04 LTS (Available with Ubuntu Pro) Summary: Several security issues were fixed in the Linux kernel. Software Description: – linux: …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-44931","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/44931","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=44931"}],"version-history":[{"count":1,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/44931\/revisions"}],"predecessor-version":[{"id":45084,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/44931\/revisions\/45084"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=44931"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=44931"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=44931"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}