linux, linux-aws, linux-azure-4.15, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - Userspace I/O drivers; - Ceph distributed file system; - Ext4 file system; - JFS file system; - NILFS2 file system; - Bluetooth subsystem; - Networking core; - IPv4 networking; - IPv6 networking; - Logical Link layer; - MAC80211 subsystem; - Netlink; - NFC subsystem; - Tomoyo security module; (CVE-2023-52524, CVE-2023-52530, CVE-2023-52601, CVE-2023-52439, CVE-2024-26635, CVE-2023-52602, CVE-2024-26614, CVE-2024-26704, CVE-2023-52604, CVE-2023-52566, CVE-2021-46981, CVE-2024-26622, CVE-2024-26735, CVE-2024-26805, CVE-2024-26801, CVE-2023-52583)
02 / AFFECTED SOFTWARE
Affected packages
139 explicit affected versions
88 explicit affected versions
125 explicit affected versions
112 explicit affected versions
65 explicit affected versions
66 explicit affected versions
105 explicit affected versions
91 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - Userspace I/O drivers; - Ceph distributed file system; - Ext4 file system; - JFS file system; - NILFS2 file system; - Bluetooth subsystem; - Networking core; - IPv4 networking; - IPv6 networking; - Logical Link layer; - MAC80211 subsystem; - Netlink; - NFC subsystem; - Tomoyo security module; (CVE-2023-52524, CVE-2023-52530, CVE-2023-52601, CVE-2023-52439, CVE-2024-26635, CVE-2023-52602, CVE-2024-26614, CVE-2024-26704, CVE-2023-52604, CVE-2023-52566, CVE-2021-46981, CVE-2024-26622, CVE-2024-26735, CVE-2024-26805, CVE-2024-26801, CVE-2023-52583)
05 / REFERENCES
Further evidence
- https://ubuntu.com/security/CVE-2021-46981
- https://ubuntu.com/security/CVE-2023-47233
- https://ubuntu.com/security/CVE-2023-52439
- https://ubuntu.com/security/CVE-2023-52524
- https://ubuntu.com/security/CVE-2023-52530
- https://ubuntu.com/security/CVE-2023-52566
- https://ubuntu.com/security/CVE-2023-52583
- https://ubuntu.com/security/CVE-2023-52601
- https://ubuntu.com/security/CVE-2023-52602
- https://ubuntu.com/security/CVE-2023-52604
- https://ubuntu.com/security/CVE-2024-26614
- https://ubuntu.com/security/CVE-2024-26622
- https://ubuntu.com/security/CVE-2024-26635
- https://ubuntu.com/security/CVE-2024-26704
- https://ubuntu.com/security/CVE-2024-26735
- https://ubuntu.com/security/CVE-2024-26801
- https://ubuntu.com/security/CVE-2024-26805
- https://ubuntu.com/security/notices/USN-6777-1