USN-5977-1

Advisory lineage Upstream: 6 Downstream: 0
Published: 27 Mar 2023, 22:38
Last modified:03 Jun 2026, 14:04

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

27 Mar 2023, 22:38
Published
Vulnerability first disclosed
03 Jun 2026, 14:04
Last Modified
Vulnerability information updated

Description

linux-oem-6.0 vulnerabilities It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-1281) It was discovered that the KVM VMX implementation in the Linux kernel did not properly handle indirect branch prediction isolation between L1 and L2 VMs. An attacker in a guest VM could use this to expose sensitive information from the host OS or other guest VMs. (CVE-2022-2196) Thadeu Cascardo discovered that the io_uring subsystem contained a double- free vulnerability in certain memory allocation error conditions. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-1032)

Affected Systems

  • ubuntu•linux-oem-6.0

    < 6.0.0-1013.13

References (4)