UBUNTU-CVE-2023-51781
Vulnerability Summary
Timeline
Description
An issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has a use-after-free because of an atalk_recvmsg race condition.
CVSS Metrics
- v3.1•HIGH•Score: 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Systems
- ubuntu•linux
all | < 4.4.0-252.286 | < 4.15.0-223.235 | < 5.4.0-172.190 | < 5.15.0-97.107
- ubuntu•linux-allwinner-5.19
all
- ubuntu•linux-aws
< 4.4.0-1129.135 | < 4.4.0-1167.182 | < 4.15.0-1166.179 | < 5.4.0-1119.129 | < 5.15.0-1055.60
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.15
< 5.15.0-1055.60~20.04.1
- ubuntu•linux-aws-5.19
all
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
< 5.4.0-1119.129~18.04.1
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-6.2
all
- ubuntu•linux-aws-6.5
all
- ubuntu•linux-aws-fips
< 4.15.0-2105.111 | all | < 5.4.0-1119.129+fips1 | < 5.15.0-1055.60+fips1
- ubuntu•linux-aws-hwe
< 4.15.0-1166.179~16.04.1
- ubuntu•linux-azure
< 4.15.0-1175.190~14.04.1 | < 4.15.0-1175.190~16.04.1 | all | < 5.4.0-1124.131 | < 5.15.0-1057.65
- ubuntu•linux-azure-4.15
< 4.15.0-1175.190
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.15
< 5.15.0-1057.65~20.04.1
- ubuntu•linux-azure-5.19
all
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
< 5.4.0-1124.131~18.04.1
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-6.2
all
- ubuntu•linux-azure-6.5
all
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all | < 5.15.0-1057.65.1 | all
- ubuntu•linux-azure-fde-5.19
all
- ubuntu•linux-azure-fde-6.2
all
- ubuntu•linux-azure-fde-6.8
all
- ubuntu•linux-azure-fips
< 4.15.0-2084.90 | all | < 5.4.0-1124.131+fips1
- ubuntu•linux-bluefield
< 5.15.0-1036.38 | < 5.4.0-1079.85 | < 5.15.0-1036.38 | all
- ubuntu•linux-fips
< 4.4.0-1099.106 | all | < 4.15.0-1121.132 | < 5.15.0-97.107+fips1
- ubuntu•linux-gcp
< 4.15.0-1160.177~16.04.1 | all | < 5.4.0-1123.132 | < 5.15.0-1052.60
- ubuntu•linux-gcp-4.15
< 4.15.0-1160.177
- ubuntu•linux-gcp-5.11
all
- ubuntu•linux-gcp-5.13
all
- ubuntu•linux-gcp-5.15
< 5.15.0-1052.60~20.04.1
- ubuntu•linux-gcp-5.19
all
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.4
< 5.4.0-1123.132~18.04.1
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gcp-6.2
all
- ubuntu•linux-gcp-6.5
all
- ubuntu•linux-gcp-fips
< 4.15.0-2068.73 | all | < 5.15.0-1055.63+fips2
- ubuntu•linux-gke
all | < 5.15.0-1051.56
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.15
all
- ubuntu•linux-gke-5.4
all
Showing first 50 affected entries in server-rendered view.
References (21)
- https://ubuntu.com/security/CVE-2023-51781
- https://git.kernel.org/linus/189ff16722ee36ced4d2a2469d4ab65a8fee4198
- https://lore.kernel.org/all/20231213041056.GA519680@v4bel-B760M-AORUS-ELITE-AX/
- https://ubuntu.com/security/notices/USN-6639-1
- https://ubuntu.com/security/notices/USN-6648-1
- https://ubuntu.com/security/notices/USN-6651-1
- https://ubuntu.com/security/notices/USN-6652-1
- https://ubuntu.com/security/notices/USN-6653-1
- https://ubuntu.com/security/notices/USN-6648-2
- https://ubuntu.com/security/notices/USN-6651-2
- https://ubuntu.com/security/notices/USN-6653-2
- https://ubuntu.com/security/notices/USN-6651-3
- https://ubuntu.com/security/notices/USN-6653-3
- https://ubuntu.com/security/notices/USN-6653-4
- https://ubuntu.com/security/notices/USN-6700-1
- https://ubuntu.com/security/notices/USN-6701-1
- https://ubuntu.com/security/notices/USN-6701-2
- https://ubuntu.com/security/notices/USN-6700-2
- https://ubuntu.com/security/notices/USN-6701-3
- https://ubuntu.com/security/notices/USN-6701-4
- https://www.cve.org/CVERecord?id=CVE-2023-51781