usn-6681-4
Vulnerability from osv_ubuntu
Published
2024-03-19 19:02
Modified
2026-06-03 10:45
Summary
linux-aws, linux-aws-5.4 vulnerabilities
Details

Wenqing Liu discovered that the f2fs file system implementation in the Linux kernel did not properly validate inode types while performing garbage collection. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2021-44879)

It was discovered that the DesignWare USB3 for Qualcomm SoCs driver in the Linux kernel did not properly handle certain error conditions during device registration. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-22995)

Bien Pham discovered that the netfiler subsystem in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. A local user could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-4244)

It was discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-51779)

It was discovered that a race condition existed in the ATM (Asynchronous Transfer Mode) subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-51780)

It was discovered that a race condition existed in the Rose X.25 protocol implementation in the Linux kernel, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-51782)

Alon Zahavi discovered that the NVMe-oF/TCP subsystem of the Linux kernel did not properly handle connect command payloads in certain situations, leading to an out-of-bounds read vulnerability. A remote attacker could use this to expose sensitive information (kernel memory). (CVE-2023-6121)

It was discovered that the VirtIO subsystem in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to possibly expose sensitive information (kernel memory). (CVE-2024-0340)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-44879",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-4244",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-6121",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-22995",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-51779",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-51780",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-51782",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-0340",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "linux-aws-5.4-cloud-tools-5.4.0-1120",
            "binary_version": "5.4.0-1120.130~18.04.1"
          },
          {
            "binary_name": "linux-aws-5.4-headers-5.4.0-1120",
            "binary_version": "5.4.0-1120.130~18.04.1"
          },
          {
            "binary_name": "linux-aws-5.4-tools-5.4.0-1120",
            "binary_version": "5.4.0-1120.130~18.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130~18.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130~18.04.1"
          },
          {
            "binary_name": "linux-headers-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130~18.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130~18.04.1"
          },
          {
            "binary_name": "linux-modules-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130~18.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130~18.04.1"
          },
          {
            "binary_name": "linux-tools-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130~18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "linux-aws-5.4",
        "purl": "pkg:deb/ubuntu/linux-aws-5.4@5.4.0-1120.130~18.04.1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.4.0-1120.130~18.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.4.0-1018.18~18.04.1",
        "5.4.0-1020.20~18.04.2",
        "5.4.0-1022.22~18.04.1",
        "5.4.0-1024.24~18.04.1",
        "5.4.0-1025.25~18.04.1",
        "5.4.0-1028.29~18.04.1",
        "5.4.0-1029.30~18.04.1",
        "5.4.0-1030.31~18.04.1",
        "5.4.0-1032.33~18.04.1",
        "5.4.0-1034.35~18.04.1",
        "5.4.0-1035.37~18.04.1",
        "5.4.0-1037.39~18.04.1",
        "5.4.0-1038.40~18.04.1",
        "5.4.0-1039.41~18.04.1",
        "5.4.0-1041.43~18.04.1",
        "5.4.0-1043.45~18.04.1",
        "5.4.0-1045.47~18.04.1",
        "5.4.0-1047.49~18.04.1",
        "5.4.0-1048.50~18.04.1",
        "5.4.0-1049.51~18.04.1",
        "5.4.0-1051.53~18.04.1",
        "5.4.0-1054.57~18.04.1",
        "5.4.0-1055.58~18.04.1",
        "5.4.0-1056.59~18.04.1",
        "5.4.0-1057.60~18.04.1",
        "5.4.0-1058.61~18.04.3",
        "5.4.0-1059.62~18.04.1",
        "5.4.0-1060.63~18.04.1",
        "5.4.0-1061.64~18.04.1",
        "5.4.0-1063.66~18.04.1",
        "5.4.0-1064.67~18.04.1",
        "5.4.0-1065.68~18.04.1",
        "5.4.0-1066.69~18.04.1",
        "5.4.0-1068.72~18.04.1",
        "5.4.0-1069.73~18.04.1",
        "5.4.0-1071.76~18.04.1",
        "5.4.0-1072.77~18.04.1",
        "5.4.0-1075.80~18.04.1",
        "5.4.0-1078.84~18.04.1",
        "5.4.0-1080.87~18.04.1",
        "5.4.0-1081.88~18.04.1",
        "5.4.0-1083.90~18.04.1",
        "5.4.0-1084.91~18.04.1",
        "5.4.0-1085.92~18.04.1",
        "5.4.0-1086.93~18.04.1",
        "5.4.0-1088.96~18.04.1",
        "5.4.0-1089.97~18.04.1",
        "5.4.0-1090.98~18.04.1",
        "5.4.0-1092.100~18.04.2",
        "5.4.0-1093.102~18.04.2",
        "5.4.0-1094.102~18.04.1",
        "5.4.0-1096.104~18.04.1",
        "5.4.0-1097.105~18.04.1",
        "5.4.0-1099.107~18.04.1",
        "5.4.0-1100.108~18.04.1",
        "5.4.0-1101.109~18.04.1",
        "5.4.0-1103.111~18.04.1",
        "5.4.0-1104.112~18.04.1",
        "5.4.0-1105.113~18.04.1",
        "5.4.0-1106.114~18.04.1",
        "5.4.0-1107.115~18.04.1",
        "5.4.0-1108.116~18.04.1",
        "5.4.0-1109.118~18.04.1",
        "5.4.0-1110.119~18.04.1",
        "5.4.0-1111.120~18.04.1",
        "5.4.0-1112.121~18.04.2",
        "5.4.0-1113.123~18.04.1",
        "5.4.0-1114.124~18.04.1",
        "5.4.0-1116.126~18.04.1",
        "5.4.0-1117.127~18.04.1",
        "5.4.0-1118.128~18.04.1",
        "5.4.0-1119.129~18.04.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-44879",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-4244",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-6121",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-22995",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-51779",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-51780",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-51782",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-0340",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-aws-cloud-tools-5.4.0-1120",
            "binary_version": "5.4.0-1120.130"
          },
          {
            "binary_name": "linux-aws-headers-5.4.0-1120",
            "binary_version": "5.4.0-1120.130"
          },
          {
            "binary_name": "linux-aws-tools-5.4.0-1120",
            "binary_version": "5.4.0-1120.130"
          },
          {
            "binary_name": "linux-buildinfo-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130"
          },
          {
            "binary_name": "linux-cloud-tools-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130"
          },
          {
            "binary_name": "linux-headers-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130"
          },
          {
            "binary_name": "linux-image-unsigned-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130"
          },
          {
            "binary_name": "linux-modules-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130"
          },
          {
            "binary_name": "linux-modules-extra-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130"
          },
          {
            "binary_name": "linux-tools-5.4.0-1120-aws",
            "binary_version": "5.4.0-1120.130"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-aws",
        "purl": "pkg:deb/ubuntu/linux-aws@5.4.0-1120.130?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.4.0-1120.130"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.3.0-1003.3",
        "5.3.0-1008.9",
        "5.3.0-1009.10",
        "5.3.0-1010.11",
        "5.4.0-1005.5",
        "5.4.0-1007.7",
        "5.4.0-1008.8",
        "5.4.0-1009.9",
        "5.4.0-1011.11",
        "5.4.0-1015.15",
        "5.4.0-1017.17",
        "5.4.0-1018.18",
        "5.4.0-1020.20",
        "5.4.0-1021.21",
        "5.4.0-1022.22",
        "5.4.0-1024.24",
        "5.4.0-1025.25",
        "5.4.0-1028.29",
        "5.4.0-1029.30",
        "5.4.0-1030.31",
        "5.4.0-1032.33",
        "5.4.0-1034.35",
        "5.4.0-1035.37",
        "5.4.0-1037.39",
        "5.4.0-1038.40",
        "5.4.0-1039.41",
        "5.4.0-1041.43",
        "5.4.0-1043.45",
        "5.4.0-1045.47",
        "5.4.0-1047.49",
        "5.4.0-1048.50",
        "5.4.0-1049.51",
        "5.4.0-1051.53",
        "5.4.0-1054.57",
        "5.4.0-1055.58",
        "5.4.0-1056.59",
        "5.4.0-1057.60",
        "5.4.0-1058.61",
        "5.4.0-1059.62",
        "5.4.0-1060.63",
        "5.4.0-1061.64",
        "5.4.0-1063.66",
        "5.4.0-1064.67",
        "5.4.0-1065.68",
        "5.4.0-1066.69",
        "5.4.0-1068.72",
        "5.4.0-1069.73",
        "5.4.0-1071.76",
        "5.4.0-1072.77",
        "5.4.0-1073.78",
        "5.4.0-1075.80",
        "5.4.0-1078.84",
        "5.4.0-1080.87",
        "5.4.0-1081.88",
        "5.4.0-1083.90",
        "5.4.0-1084.91",
        "5.4.0-1085.92",
        "5.4.0-1086.93",
        "5.4.0-1088.96",
        "5.4.0-1089.97",
        "5.4.0-1092.100",
        "5.4.0-1093.101",
        "5.4.0-1094.102",
        "5.4.0-1096.104",
        "5.4.0-1097.105",
        "5.4.0-1099.107",
        "5.4.0-1100.108",
        "5.4.0-1101.109",
        "5.4.0-1102.110",
        "5.4.0-1103.111",
        "5.4.0-1104.112",
        "5.4.0-1105.113",
        "5.4.0-1106.114",
        "5.4.0-1107.115",
        "5.4.0-1108.116",
        "5.4.0-1109.118",
        "5.4.0-1110.119",
        "5.4.0-1111.120",
        "5.4.0-1112.121",
        "5.4.0-1113.123",
        "5.4.0-1114.124",
        "5.4.0-1116.126",
        "5.4.0-1117.127",
        "5.4.0-1118.128",
        "5.4.0-1119.129"
      ]
    }
  ],
  "aliases": [],
  "details": "Wenqing Liu discovered that the f2fs file system implementation in the\nLinux kernel did not properly validate inode types while performing garbage\ncollection. An attacker could use this to construct a malicious f2fs image\nthat, when mounted and operated on, could cause a denial of service (system\ncrash). (CVE-2021-44879)\n\nIt was discovered that the DesignWare USB3 for Qualcomm SoCs driver in the\nLinux kernel did not properly handle certain error conditions during device\nregistration. A local attacker could possibly use this to cause a denial of\nservice (system crash). (CVE-2023-22995)\n\nBien Pham discovered that the netfiler subsystem in the Linux kernel\ncontained a race condition, leading to a use-after-free vulnerability. A\nlocal user could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2023-4244)\n\nIt was discovered that a race condition existed in the Bluetooth subsystem\nof the Linux kernel, leading to a use-after-free vulnerability. A local\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2023-51779)\n\nIt was discovered that a race condition existed in the ATM (Asynchronous\nTransfer Mode) subsystem of the Linux kernel, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-51780)\n\nIt was discovered that a race condition existed in the Rose X.25 protocol\nimplementation in the Linux kernel, leading to a use-after- free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-51782)\n\nAlon Zahavi discovered that the NVMe-oF/TCP subsystem of the Linux kernel\ndid not properly handle connect command payloads in certain situations,\nleading to an out-of-bounds read vulnerability. A remote attacker could use\nthis to expose sensitive information (kernel memory). (CVE-2023-6121)\n\nIt was discovered that the VirtIO subsystem in the Linux kernel did not\nproperly initialize memory in some situations. A local attacker could use\nthis to possibly expose sensitive information (kernel memory).\n(CVE-2024-0340)\n",
  "id": "USN-6681-4",
  "modified": "2026-06-03T10:45:37Z",
  "published": "2024-03-19T19:02:21Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6681-4"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-44879"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-4244"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-6121"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-22995"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-51779"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-51780"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-51782"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-0340"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "linux-aws, linux-aws-5.4 vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2021-44879",
    "UBUNTU-CVE-2023-4244",
    "UBUNTU-CVE-2023-6121",
    "UBUNTU-CVE-2023-22995",
    "UBUNTU-CVE-2023-51779",
    "UBUNTU-CVE-2023-51780",
    "UBUNTU-CVE-2023-51782",
    "UBUNTU-CVE-2024-0340"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.