FlawAtlas
Search the atlas
USN-6193-1 Not scored

linux, linux-aws, linux-aws-5.15, linux-aws-5.4, linux-azure, linux-azure-5.15, linux-azure-5.4, linux-azure-fde-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gcp-5.4, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-35788, LP: #2023577) It was discovered that for some Intel processors the INVLPG instruction implementation did not properly flush global TLB entries when PCIDs are enabled. An attacker could use this to expose sensitive information (kernel memory) or possibly cause undesired behaviors. (LP: #2023220)

Exploit probability Not scored
Published June 29, 2023
Required by Not available
Last source change June 3, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:22.04:LTS linux-ibm

23 explicit affected versions

Ubuntu:20.04:LTS linux-azure-fde-5.15

14 explicit affected versions

Ubuntu:22.04:LTS linux

32 explicit affected versions

Ubuntu:22.04:LTS linux-gkeop

18 explicit affected versions

Ubuntu:22.04:LTS linux-azure

29 explicit affected versions

Ubuntu:20.04:LTS linux-lowlatency-hwe-5.15

18 explicit affected versions

Ubuntu:22.04:LTS linux-gke

25 explicit affected versions

Ubuntu:22.04:LTS linux-raspi

26 explicit affected versions

Ubuntu:20.04:LTS linux-kvm

66 explicit affected versions

Ubuntu:20.04:LTS linux-gke-5.15

15 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-hwe-5.4

68 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-azure-5.4

58 explicit affected versions

Ubuntu:20.04:LTS linux-gcp

71 explicit affected versions

Ubuntu:20.04:LTS linux

79 explicit affected versions

Ubuntu:20.04:LTS linux-azure

68 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-gcp-5.4

60 explicit affected versions

Ubuntu:22.04:LTS linux-lowlatency

29 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-raspi-5.4

55 explicit affected versions

Ubuntu:22.04:LTS linux-aws

28 explicit affected versions

Ubuntu:20.04:LTS linux-aws

71 explicit affected versions

Ubuntu:20.04:LTS linux-oracle

70 explicit affected versions

Ubuntu:20.04:LTS linux-oracle-5.15

18 explicit affected versions

Ubuntu:22.04:LTS linux-nvidia

10 explicit affected versions

Ubuntu:22.04:LTS linux-oracle

26 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-ibm-5.4

30 explicit affected versions

Ubuntu:22.04:LTS linux-kvm

29 explicit affected versions

Ubuntu:20.04:LTS linux-gcp-5.15

19 explicit affected versions

Ubuntu:20.04:LTS linux-ibm

37 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-oracle-5.4

59 explicit affected versions

Ubuntu:20.04:LTS linux-azure-5.15

21 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-aws-5.4

58 explicit affected versions

Ubuntu:20.04:LTS linux-gkeop-5.15

15 explicit affected versions

Ubuntu:20.04:LTS linux-hwe-5.15

19 explicit affected versions

Ubuntu:20.04:LTS linux-aws-5.15

19 explicit affected versions

Ubuntu:22.04:LTS linux-gcp

26 explicit affected versions

Ubuntu:20.04:LTS linux-bluefield

32 explicit affected versions

Ubuntu:20.04:LTS linux-raspi

59 explicit affected versions

Ubuntu:20.04:LTS linux-gkeop

48 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities USN-6193-1

Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-35788, LP: #2023577) It was discovered that for some Intel processors the INVLPG instruction implementation did not properly flush global TLB entries when PCIDs are enabled. An attacker could use this to expose sensitive information (kernel memory) or possibly cause undesired behaviors. (LP: #2023220)

View original source

05 / REFERENCES

Further evidence