CLSA-2023-1695041288
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1695041288.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2023-1695041288
- Upstream
- Published
- 2023-09-18T12:48:12Z
- Modified
- 2026-06-04T10:04:47.890975580Z
- Summary
- Fix of 8 CVEs
- Details
-
- CVE-url: https://ubuntu.com/security/CVE-2023-4622
- afunix: Fix null-ptr-deref in unixstream_sendpage().
- Jammy update: v5.15.105 upstream stable release (LP: #2023230) // CVE-url:
https://ubuntu.com/security/CVE-2022-4269
- net/sched: actmirred: better wording on protection against excessive stack growth
- actmirred: use the backlog for nested calls to mirred ingress
- CVE-url: https://ubuntu.com/security/CVE-2022-4269
- net/sched: user-space can't set unknown tcfaaction values
- net/tc: introduce TCACTREINSERT.
- actmirred: use TCACTREINSERT when possible
- net: sched: actmirred method rename for grep-ability and consistency
- net: sched: protect against stack overflow in TC actmirred
- net/sched: act_mirred: refactor the handle of xmit
- selftests: forwarding: Introduce tc actions tests
- Jammy update: v5.15.94 upstream stable release (LP: #2012673) // CVE-url:
https://ubuntu.com/security/CVE-2022-27672
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- CVE-url: https://ubuntu.com/security/CVE-2022-27672
- KVM: x86: drop bogus MWAIT check
- KVM: x86: simplify kvmmwaitinguest()
- KVM: X86: Provide a capability to disable MWAIT intercepts
- KVM: X86: Provide a capability to disable HLT intercepts
- KVM: VMX: Remove redundant write to set vCPU as active at RESET/INIT
- KVM: X86: Provide a capability to disable PAUSE intercepts
- x86/headers/UAPI: Move DISABLEEXITS KVM capability bits to the UAPI
- tools headers kvm: Sync uapi/linux/kvm.h with the kernel sources
- KVM: X86: Provide a capability to disable cstate msr read intercepts
- Jammy update: v5.15.110 upstream stable release (LP: #2025090) // CVE-url:
https://ubuntu.com/security/CVE-2023-2002
- bluetooth: Perform careful capability checks in hcisockioctl()
- Jammy update: v5.15.80 upstream stable release (LP: #2003122) // CVE-url:
https://ubuntu.com/security/CVE-2022-3169
- nvme: ensure subsystem reset is single threaded
- CVE-url: https://ubuntu.com/security/CVE-2022-3169
- nvme: host deletework and resetwork on separate workqueues
- PCI/ASPM: Add pcieaspmenabled()
- nvme-pci: Allow PCI bus-level PM to be used if ASPM is disabled
- nvme: Prevent resets during paused controller state
- nvme: Add quirk for LiteON CL1 devices running FW 22301111
- nvme: Wait for reset state when required
- Jammy update: v5.15.81 upstream stable release (LP: #2003130) // CVE-url:
https://ubuntu.com/security/CVE-2022-47519
- wifi: wilc1000: validate length of IEEE80211P2PATTROPERCHANNEL attribute
- CVE-2022-47520 // CVE-url: https://ubuntu.com/security/CVE-2022-47520
- wifi: wilc1000: validate pairwise and authentication suite offsets
- CVE-url: https://ubuntu.com/security/CVE-2022-45919
- media: dvb-core: Fix use-after-free due to race condition at dvbcaen50221
- CVE-url: https://ubuntu.com/security/CVE-2023-4622
- References