USN-6174-1

Advisory lineage Upstream: 6 Downstream: 0
Published: 16 Jun 2023, 19:59
Last modified:03 Jun 2026, 14:04

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Jun 2023, 19:59
Published
Vulnerability first disclosed
03 Jun 2026, 14:04
Last Modified
Vulnerability information updated

Description

linux-oem-5.17 vulnerabilities Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did not properly implement speculative execution barriers in usercopy functions in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2023-0459) It was discovered that the Human Interface Device (HID) support driver in the Linux kernel contained a type confusion vulnerability in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-1073) It was discovered that the NTFS file system implementation in the Linux kernel did not properly handle a loop termination condition, leading to an out-of-bounds read vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-26606)

Affected Systems

  • ubuntu•linux-oem-5.17

    < 5.17.0-1033.34

References (4)