USN-6648-1

Advisory lineage Upstream: 8 Downstream: 0
Published: 22 Feb 2024, 01:12
Last modified:23 May 2026, 01:34

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

22 Feb 2024, 01:12
Published
Vulnerability first disclosed
23 May 2026, 01:34
Last Modified
Vulnerability information updated

Description

linux, linux-aws, linux-aws-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities It was discovered that a race condition existed in the AppleTalk networking subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-51781) Zhenghan Wang discovered that the generic ID allocator implementation in the Linux kernel did not properly check for null bitmap when releasing IDs. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-6915) Robert Morris discovered that the CIFS network file system implementation in the Linux kernel did not properly validate certain server commands fields, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2024-0565) Jann Horn discovered that the TLS subsystem in the Linux kernel did not properly handle spliced messages, leading to an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-0646)

Affected Systems

  • ubuntu•linux

    < 5.4.0-172.190

  • ubuntu•linux-aws

    < 5.4.0-1119.129

  • ubuntu•linux-aws-5.4

    < 5.4.0-1119.129~18.04.1

  • ubuntu•linux-bluefield

    < 5.4.0-1079.85

  • ubuntu•linux-gcp

    < 5.4.0-1123.132

  • ubuntu•linux-gcp-5.4

    < 5.4.0-1123.132~18.04.1

  • ubuntu•linux-gkeop

    < 5.4.0-1086.90

  • ubuntu•linux-hwe-5.4

    < 5.4.0-172.190~18.04.1

  • ubuntu•linux-ibm

    < 5.4.0-1066.71

  • ubuntu•linux-ibm-5.4

    < 5.4.0-1066.71~18.04.1

  • ubuntu•linux-iot

    < 5.4.0-1031.32

  • ubuntu•linux-kvm

    < 5.4.0-1107.114

  • ubuntu•linux-oracle

    < 5.4.0-1118.127

  • ubuntu•linux-oracle-5.4

    < 5.4.0-1118.127~18.04.1

  • ubuntu•linux-raspi

    < 5.4.0-1103.115

  • ubuntu•linux-raspi-5.4

    < 5.4.0-1103.115~18.04.1

  • ubuntu•linux-xilinx-zynqmp

    < 5.4.0-1038.42

References (5)