🛡️ USN-6327-1 — linux-kvm

linux-kvm vulnerabilities

Zheng Zhang discovered that the device-mapper implementation in the Linux

kernel did not properly handle locking during table_clear() operations. A

local attacker could use this to cause a denial of service (kernel

deadlock). (CVE-2023-2269)

It was discovered that a use-after-free vulnerability existed in the HFS+

file system implementation in the Linux kernel. A local attacker could

possibly use this to cause a denial of service (system crash).

(CVE-2023-2985)

It was discovered that the DVB Core driver in the Linux kernel did not

properly handle locking events in certain situations. A local attacker

could use this to cause a denial of service (kernel deadlock).

(CVE-2023-31084)

It was discovered that the virtual terminal driver in the Linux kernel

contained a use-after-free vulnerability. A local attacker could use this

to cause a denial of service (system crash) or possibly expose sensitive

information (kernel memory). (CVE-2023-3567)

It was discovered that the Quick Fair Queueing network scheduler

implementation in the Linux kernel contained an out-of-bounds write

vulnerability. A local attacker could use this to cause a denial of service

(system crash) or possibly execute arbitrary code. (CVE-2023-3611)

It was discovered that the network packet classifier with

netfilter/firewall marks implementation in the Linux kernel did not

properly handle reference counting, leading to a use-after-free

vulnerability. A local attacker could use this to cause a denial of service

(system crash) or possibly execute arbitrary code. (CVE-2023-3776)