Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Debian: DSA-5448-1 Critical: Linux Kernel Privilege Escalation and DoS

debian
Calendar Grey July 5, 2023
Debian Logo
Multiple vulnerabilities identified in the Linux kernel may expose systems to significant threats, such as unauthorized privilege elevation. Immediate update advised!
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks

Summary

CVE-2023-2124

Kyle Zeng, Akshay Ajayan and Fish Wang discovered that missing
metadata validation may result in denial of service or potential
privilege escalation if a corrupted XFS disk image is mounted.

CVE-2023-2156

It was discovered that the IPv6 RPL protocol implementation in the
Linux kernel did not properly handled user-supplied data, resulting
in a triggerable assertion. An unauthenticated remote attacker can
take advantage of this flaw for denial of service.

CVE-2023-2269

Zheng Zhang reported that improper handling of locking in the device
mapper implementation may result in denial of service.

CVE-2023-3090

It was discovered that missing initialization in ipvlan networking
may lead to an out-of-bounds write vulnerability, resulting in
denial of service or potentially the execution of arbitrary code.

CVE-2023-3212

Yang Lan that missing validation in the GFS2 filesystem could result
in denial of service via a NULL pointer dereference when...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Package: linux
CVE ID: CVE-2023-2124 CVE-2023-2156 CVE-2023-2269 CVE-2023-3090

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here