🛡️ USN-6173-1 — linux-oem-6.1

linux-oem-6.1 vulnerabilities

Gwangun Jung discovered that the Quick Fair Queueing scheduler

implementation in the Linux kernel contained an out-of-bounds write

vulnerability. A local attacker could use this to cause a denial of service

(system crash) or possibly execute arbitrary code. (CVE-2023-31436)

It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux

kernel did not properly perform data buffer size validation in some

situations. A physically proximate attacker could use this to craft a

malicious USB device that when inserted, could cause a denial of service

(system crash) or possibly expose sensitive information. (CVE-2023-1380)

Ruihan Li discovered that the bluetooth subsystem in the Linux kernel did

not properly perform permissions checks when handling HCI sockets. A

physically proximate attacker could use this to cause a denial of service

(bluetooth communication). (CVE-2023-2002)

It was discovered that the IPv6 RPL protocol implementation in the Linux

kernel did not properly handle user-supplied data. A remote attacker could

use this to cause a denial of service (system crash). (CVE-2023-2156)

Zheng Zhang discovered that the device-mapper implementation in the Linux

kernel did not properly handle locking during table_clear() operations. A

local attacker could use this to cause a denial of service (kernel

deadlock). (CVE-2023-2269)

Quentin Minster discovered that a race condition existed in the KSMBD

implementation in the Linux kernel when handling sessions operations. A

remote attacker could use this to cause a denial of service (system crash)

or possibly execute arbitrary code. (CVE-2023-32250)

Quentin Minster discovered that a race condition existed in the KSMBD

implementation in the Linux kernel, leading to a use-after-free

vulnerability. A remote attacker could use this to cause a denial of

service (system crash) or possibly execute arbitrary code. (CVE-2023-32254)