USN-6743-3: linux-azure-6.5 Ubuntu
CVSS: UnknownPublished
Published 24-04-2024Last modified 06-08-2026
Vulnerability summary
USN-6743-3 is a vulnerability in linux-azure-6.5 Ubuntu with no CVSS score yet.
CVSS score
Not scored
010
No CVSS score recordedEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 24-04-2024PublishedVulnerability first disclosed.
- 06-08-2026Last modifiedVulnerability information updated.
Description
linux-azure-6.5 vulnerabilities Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - JFS file system; - BPF subsystem; - Netfilter; (CVE-2023-52600, CVE-2024-26589, CVE-2024-26591, CVE-2024-26581, CVE-2023-52603)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- linux-azure-6.5< 6.5.0-1019.20~22.04.1
1 vendor · 1 product
References
6 linksRelated vulnerabilities
USN-6895-2ubuntulinux-azure-6.5+1linux-azure-6.5, linux-gcp-6.5 vulnerabilities
It was discovered that the ATA over Ethernet (AoE) driver in the Linux
kernel contained a race condition, leading to a use-after-free
vulnerability. An attacker could use this to cause a denial of service or
possibly execute arbitrary code. (CVE-2023-6270)
It was discovered that the HugeTLB file system component of the Linux
Kernel contained a NULL pointer dereference vulnerability. A privileged
attacker could possibly use this to to cause a denial of service.
(CVE-2024-0841)
It was discovered that the Open vSwitch implementation in the Linux kernel
could overflow its stack during recursive action operations under certain
conditions. A local attacker could use this to cause a denial of service
(system crash). (CVE-2024-1151)
Gui-Dong Han discovered that the software RAID driver in the Linux kernel
contained a race condition, leading to an integer overflow vulnerability. A
privileged attacker could possibly use this to cause a denial of service
(system crash). (CVE-2024-23307)
Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in
the Linux kernel contained a race condition, leading to an integer overflow
vulnerability. An attacker could possibly use this to cause a denial of
service (system crash). (CVE-2024-24861)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- PowerPC architecture;
- x86 architecture;
- Cryptographic API;
- Android drivers;
- Block layer subsystem;
- Bluetooth drivers;
- DMA engine subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- On-Chip Interconnect management framework;
- Multiple devices driver;
- Media drivers;
- Network drivers;
- PHY drivers;
- MediaTek PM domains;
- SCSI drivers;
- TTY drivers;
- USB subsystem;
- DesignWare USB3 driver;
- Framebuffer layer;
- AFS file system;
- BTRFS file system;
- Ceph distributed file system;
- Ext4 file system;
- File systems infrastructure;
- NILFS2 file system;
- NTFS3 file system;
- SMB network file system;
- Core kernel;
- Memory management;
- Bluetooth subsystem;
- CAN network layer;
- Devlink API;
- Handshake API;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Multipath TCP;
- Netfilter;
- NFC subsystem;
- RxRPC session sockets;
- TIPC protocol;
- Unix domain sockets;
- Realtek audio codecs;
(CVE-2024-26684, CVE-2024-26889, CVE-2024-26662, CVE-2024-26660,
CVE-2024-26708, CVE-2024-26677, CVE-2024-26696, CVE-2024-26664,
CVE-2024-26642, CVE-2023-52637, CVE-2024-26680, CVE-2024-26822,
CVE-2023-52638, CVE-2024-26830, CVE-2024-26715, CVE-2024-26693,
CVE-2024-26697, CVE-2024-26694, CVE-2024-26685, CVE-2023-52642,
CVE-2024-26691, CVE-2024-26798, CVE-2024-26828, CVE-2024-26663,
CVE-2024-26710, CVE-2024-26601, CVE-2024-26707, CVE-2024-26802,
CVE-2024-26675, CVE-2024-26826, CVE-2024-26916, CVE-2024-26803,
CVE-2024-26700, CVE-2024-26917, CVE-2024-26600, CVE-2024-26825,
CVE-2024-26716, CVE-2024-26602, CVE-2024-26698, CVE-2024-26711,
CVE-2024-26920, CVE-2024-26722, CVE-2024-26681, CVE-2024-26674,
CVE-2024-26712, CVE-2024-26735, CVE-2024-26782, CVE-2024-26734,
CVE-2024-26926, CVE-2024-26923, CVE-2023-52880, CVE-2024-26719,
CVE-2024-26593, CVE-2024-26603, CVE-2024-26922, CVE-2024-26717,
CVE-2024-26695, CVE-2023-52643, CVE-2024-35833, CVE-2024-26733,
CVE-2024-26667, CVE-2024-26659, CVE-2024-26714, CVE-2024-26748,
CVE-2024-26702, CVE-2024-26676, CVE-2024-26718, CVE-2024-27416,
CVE-2024-26890, CVE-2024-26720, CVE-2024-26838, CVE-2024-26665,
CVE-2024-26792, CVE-2024-26818, CVE-2024-26679, CVE-2024-26606,
CVE-2024-26736, CVE-2024-26829, CVE-2023-52631, CVE-2024-26790,
CVE-2024-26824, CVE-2024-26820, CVE-2024-26831, CVE-2024-26689,
CVE-2024-26898, CVE-2024-26789, CVE-2024-26703, CVE-2023-52645,
CVE-2024-26688, CVE-2024-26723, CVE-2024-26919, CVE-2024-26661,
CVE-2024-26726, CVE-2024-26910, CVE-2024-26666)USN-6874-1ubuntulinux-azure-6.5linux-azure, linux-azure-6.5 vulnerabilities
It was discovered that the Intel Data Streaming and Intel Analytics
Accelerator drivers in the Linux kernel allowed direct access to the
devices for unprivileged users and virtual machines. A local attacker could
use this to cause a denial of service. (CVE-2024-21823)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Microsoft Azure Network Adapter (MANA) driver;
- Netfilter;
(CVE-2024-26925, CVE-2024-26924, CVE-2024-26809, CVE-2024-26643,
CVE-2024-35901)USN-6774-1ubuntulinux-aws-6.5+8linux, linux-aws, linux-aws-6.5, linux-azure, linux-azure-6.5, linux-gcp, linux-gcp-6.5, linux-hwe-6.5, linux-laptop, linux-lowlatency, linux-lowlatency-hwe-6.5, linux-nvidia-6.5, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-raspi, linux-signed, linux-signed-aws, linux-signed-aws-6.5, linux-starfive, linux-starfive-6.5 vulnerabilities
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida
discovered that the Linux kernel mitigations for the initial Branch History
Injection vulnerability (CVE-2022-0001) were insufficient for Intel
processors. A local attacker could potentially use this to expose sensitive
information. (CVE-2024-2201)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Hardware random number generator core;
- Ext4 file system;
- JFS file system;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- Logical Link layer;
- Netlink;
- Tomoyo security module;
(CVE-2024-26704, CVE-2023-52615, CVE-2024-26805, CVE-2023-52604,
CVE-2024-26614, CVE-2023-52602, CVE-2024-26635, CVE-2024-26622,
CVE-2023-52601, CVE-2024-26801)USN-6724-1ubuntulinux-azure-6.5+6linux, linux-aws, linux-azure, linux-azure-6.5, linux-gcp, linux-gcp-6.5, linux-hwe-6.5, linux-laptop, linux-lowlatency, linux-lowlatency-hwe-6.5, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-starfive, linux-starfive-6.5 vulnerabilities
Pratyush Yadav discovered that the Xen network backend implementation in
the Linux kernel did not properly handle zero length data request, leading
to a null pointer dereference vulnerability. An attacker in a guest VM
could possibly use this to cause a denial of service (host domain crash).
(CVE-2023-46838)
It was discovered that the Habana's AI Processors driver in the Linux
kernel did not properly initialize certain data structures before passing
them to user space. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2023-50431)
It was discovered that the device mapper driver in the Linux kernel did not
properly validate target size during certain memory allocations. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2023-52429, CVE-2024-23851)
It was discovered that the CIFS network file system implementation in the
Linux kernel did not properly validate certain SMB messages, leading to an
out-of-bounds read vulnerability. An attacker could use this to cause a
denial of service (system crash) or possibly expose sensitive information.
(CVE-2023-6610)
Yang Chaoming discovered that the KSMBD implementation in the Linux kernel
did not properly validate request buffer sizes, leading to an out-of-bounds
read vulnerability. An attacker could use this to cause a denial of service
(system crash) or possibly expose sensitive information. (CVE-2024-22705)
Chenyuan Yang discovered that the btrfs file system in the Linux kernel did
not properly handle read operations on newly created subvolumes in certain
conditions. A local attacker could use this to cause a denial of service
(system crash). (CVE-2024-23850)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Android drivers;
- Userspace I/O drivers;
- F2FS file system;
- SMB network file system;
- Networking core;
(CVE-2023-52434, CVE-2023-52436, CVE-2023-52435, CVE-2023-52439,
CVE-2023-52438)USN-6707-4ubuntulinux-azure-6.5linux-azure-6.5 vulnerabilities
Lonial Con discovered that the netfilter subsystem in the Linux kernel did
not properly handle element deactivation in certain cases, leading to a
use-after-free vulnerability. A local attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2024-1085)
Notselwyn discovered that the netfilter subsystem in the Linux kernel did
not properly handle verdict parameters in certain cases, leading to a use-
after-free vulnerability. A local attacker could use this to cause a denial
of service (system crash) or possibly execute arbitrary code.
(CVE-2024-1086)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- PWM drivers;
(CVE-2024-26597, CVE-2024-26599)USN-6680-2ubuntulinux-azure-6.5+1linux-azure, linux-azure-6.5, linux-hwe-6.5 vulnerabilities
黄思聪 discovered that the NFC Controller Interface (NCI) implementation in
the Linux kernel did not properly handle certain memory allocation failure
conditions, leading to a null pointer dereference vulnerability. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2023-46343)
It was discovered that a race condition existed in the Bluetooth subsystem
of the Linux kernel, leading to a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2023-51779)
It was discovered that a race condition existed in the Rose X.25 protocol
implementation in the Linux kernel, leading to a use-after- free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-51782)
Alon Zahavi discovered that the NVMe-oF/TCP subsystem of the Linux kernel
did not properly handle connect command payloads in certain situations,
leading to an out-of-bounds read vulnerability. A remote attacker could use
this to expose sensitive information (kernel memory). (CVE-2023-6121)
Jann Horn discovered that the io_uring subsystem in the Linux kernel
contained an out-of-bounds access vulnerability. A local attacker could use
this to cause a denial of service (system crash). (CVE-2023-6560)
Dan Carpenter discovered that the netfilter subsystem in the Linux kernel
did not store data in properly sized memory locations. A local user could
use this to cause a denial of service (system crash). (CVE-2024-0607)
Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and
Shweta Shinde discovered that the Confidential Computing framework in the
Linux kernel for x86 platforms did not properly handle 32-bit emulation on
TDX and SEV. An attacker with access to the VMM could use this to cause a
denial of service (guest crash) or possibly execute arbitrary code.
(CVE-2024-25744)