A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-azure: Linux kernel for Microsoft Azure Cloud systems Details: It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service (infinite recursion). (CVE-2020-36691) Billy Jheng Bing Jhong discovered that the CIFS network file system implementation in the Linux kernel did not properly validate arguments to ioctl() in some situations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-0168) It was discovered that the ext4 file system implementation in the Linux kernel contained a use-after-free vulnerability. An attacker could use this to construct a malicious ext4 file system image th...
Read the Full AdvisoryThe problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: linux-image-5.4.0-1114-azure 5.4.0-1114.120 linux-image-azure-lts-20.04 5.4.0.1114.107 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
https://ubuntu.com/security/notices/USN-6331-1
CVE-2020-36691, CVE-2022-0168, CVE-2022-1184, CVE-2022-27672,
CVE-2022-40982, CVE-2022-4269, CVE-2023-0590, CVE-2023-1611,
CVE-2023-1855, CVE-2023-1990, CVE-2023-20593, CVE-2023-2124,
CVE-2023-2194, CVE-2023-28466, CVE-2023-30772, CVE-2023-3111,
CVE-2023-3141, CVE-2023-33203, CVE-2023-3609, CVE-2023-3611,
CVE-2023-3776
https://launchpad.net/ubuntu/+source/linux-azure/5.4.0-1114.120
Get the latest Linux and open source security news straight to your inbox.