USN-5802-1: linux Ubuntu

Vulnerability summary

USN-5802-1 is a vulnerability in linux Ubuntu with no CVSS score yet.

Timeline

1. 12-01-2023
   PublishedVulnerability first disclosed.
2. 22-10-2026
   Last modifiedVulnerability information updated.

Description

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-43945) Tamás Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-42896) It was discovered that the Xen netback driver in the Linux kernel did not properly handle packets structured in certain ways. An attacker in a guest VM could possibly use this to cause a denial of service (host NIC availability). (CVE-2022-3643) It was discovered that an integer overflow vulnerability existed in the Bluetooth subsystem in the Linux kernel. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2022-45934)

No weakness data has been published for this record.