Stay Secure with the Latest Linux Advisories

security advisorydenial of servicecritical severity

Ubuntu 22.04 LTS: USN-6056-1 Critical: Linux Kernel Guest Exploit

The guest VM system could be made to crash or expose sensitive information.. =========================================================================Ubuntu Security Notice USN-6056-1 May 05, 2023 linux-oem-6.1 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS Summary: The guest VM system could be made to crash or expose sensitive information. Software Description: - linux-oem-6.1: Linux kernel for OEM systems Details: It was discovered that a race condition existed in the Xen transport layer implementation for the 9P file system protocol in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (guest crash) or expose sensitive information (guest kernel memory). Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: linux-image-6.1.0-1010-oem 6.1.0-1010.10 linux-image-oem-22.04c 6.1.0.1010.10 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-6056-1 CVE-2023-1859 Package Information: https://launchpad.net/ubuntu/+source/linux-oem-6.1/6.1.0-1010.10 . Ubuntu 22.04 LTS faces a kernel vulnerability that might lead to possible crashes in guest virtual machines as well as risks of exposing sensitive information.. Linux Kernel Security, Ubuntu Update,Guest System Issues. . Severity: Critical. LinuxSecurity.com Team

May 05, 2023 •Critical Ubuntu