Linux Kernel Security Update Advisory

Mar 22 2024

Overview

An update has been made available to address a vulnerability in Linux. users of affected versions are advised to update to the latest version.

Affected Products

CVE-2023-52451

Linux Kernel Versions: 4.1.0 (inclusive) to 4.19.306 (excluded)
Linux Kernel Versions: 4.20.0 (inclusive) to 5.4.268 (excluded)
Linux Kernel Versions: 5.5.0 (inclusive) to 5.10.209 (excluded)
Linux Kernel versions: 5.11.0 (inclusive) to 5.15.148 (exclusive)
Linux Kernel Versions: 5.16.0 (inclusive) to 6.1.75 (excluded)
Linux Kernel versions: 6.2.0 (inclusive) to 6.6.14 (exclusive)
Linux Kernel Versions: 6.7.0 (inclusive) to 6.7.2 (exclusive)

CVE-2024-26582

Linux Kernel Versions: 6.0 (inclusive) to 6.1.79 (excluded)
Linux Kernel Versions: 6.2.0 (inclusive) to 6.6.18 (excluded)
Linux Kernel Versions: 6.7.0 (inclusive) to 6.7.6 (excluded)

CVE-2024-26588

Linux Kernel Version: < 6.1.75 (excluded)
Linux Kernel Versions: 6.2.0 (inclusive) to 6.6.14 (excluded)
Linux Kernel Versions: 6.7.0 (inclusive) to 6.7.2 (excluded)

CVE-2023-52441

Linux Kernel Versions: 5.15.0 (inclusive) to 5.15.145 (excluded)
Linux Kernel Versions: 5.16.0 (inclusive) to 6.1.53 (excluded)
Linux Kernel Versions: 6.2.0 (inclusive) to 6.4.16 (excluded)

CVE-2023-52445

Linux Kernel Version: < 4.19.306 (Excluded)
Linux Kernel Versions: 4.20 (inclusive) to 5.4.268 (excluded)
Linux Kernel version: 5.5.0 (inclusive) to 5.10.209 (excluded)
Linux Kernel versions: 5.11.0 (inclusive) to 5.15.148 (exclusive)
Linux Kernel Versions: 5.16.0 (inclusive) to 6.1.75 (excluded)
Linux Kernel versions: 6.2.0 (inclusive) to 6.6.14 (exclusive)
Linux Kernel Versions: 6.7.0 (inclusive) to 6.7.2 (exclusive)

CVE-2023-52447

Linux Kernel Versions: 5.9.0 (inclusive) to 6.1.75 (excluded)
Linux Kernel Versions: 6.2.0 (inclusive) to 6.6.14 (excluded)
Linux Kernel Versions: 6.7.0 (inclusive) to 6.7.2 (excluded)

CVE-2023-52446

Linux Kernel Versions: 6.2.0 (inclusive) to 6.6.14 (excluded)
Linux Kernel versions: 6.7.0 (inclusive) to 6.7.2 (excluded)

CVE-2023-52440

Linux Kernel Versions: 5.17.0 (inclusive) to 6.1.52 (excluded)
Linux Kernel Versions: 6.2.0 (inclusive) to 6.4.15 (excluded)
Linux Kernel Versions: 6.5.0 (inclusive) to 6.5.2 (excluded)

CVE-2023-52438

Linux Kernel Versions: 4.20.0 (inclusive) to 5.4.268 (excluded)
Linux Kernel Versions: 5.5.0 (inclusive) to 5.10.209 (excluded)
Linux Kernel versions: 5.11.0 (inclusive) to 5.15.148 (exclusive)
Linux Kernel Versions: 5.16.0 (inclusive) to 6.1.74 (exclusive)
Linux Kernel Versions: 6.2.0 (inclusive) to 6.6.13 (exclusive)
Linux Kernel Versions: 6.7.0 (inclusive) to 6.7.1 (exclusive)

CVE-2023-52439

Linux Kernel Versions: 4.18, 4.18-rc5, 4.18-rc6, 4.18-rc7, 4.18-rc8
Linux Kernel Versions: 4.18.0 (inclusive) to 4.19.306 (exclusive)
Linux Kernel Versions: 4.20.0 (inclusive) to 5.4.268 (excluded)
Linux Kernel Versions: 5.5.0 (inclusive) to 5.10.209 (excluded)
Linux Kernel Versions: 5.11.0 (inclusive) to 5.15.148 (excluded)
Linux Kernel versions: 5.16.0 (inclusive) to 6.1.74 (excluded)
Linux Kernel Versions: 6.2.0 (inclusive) to 6.6.13 (excluded)
Linux Kernel versions: 6.7.0 (inclusive) to 6.7.1 (excluded)

CVE-2023-52434

Linux Kernel Version: < 5.10.211 (Excluded)
Linux Kernel Versions: 5.11.0 (inclusive) to 5.15.150 (excluded)
Linux Kernel version: 5.16.0 (inclusive) to 6.1.79 (excluded)
Linux Kernel versions: 6.2.0 (inclusive) to 6.6.8 (excluded)

CVE-2024-26586

Linux Kernel Versions: 4.19.0 (inclusive) to 5.10.209 (excluded)
Linux Kernel Versions: 5.11.0 (inclusive) to 5.15.148 (excluded)
Linux Kernel Versions: 5.16.0 (inclusive) to 6.1.79 (excluded)
Linux Kernel Versions: 6.2.0 (inclusive) to 6.6.14 (exclusive)
Linux Kernel Versions: 6.7.0 (inclusive) to 6.7.2 (exclusive)

CVE-2023-52452

Linux Kernel Versions: 5.12 (inclusive) to 6.6.14 (excluded)
Linux Kernel Versions: 6.7.0 (inclusive) to 6.7.2 (excluded)

CVE-2024-26589

Linux Kernel Versions: 4.20 (inclusive) to 5.15.148 (excluded)
Linux Kernel Versions: 5.16.0 (inclusive) to 6.1.75 (excluded)
Linux Kernel Versions: 6.2.0 (inclusive) to 6.6.14 (exclusive)
Linux Kernel Versions: 6.7.0 (inclusive) to 6.7.2 (exclusive)

CVE-2023-52444

Linux Kernel Versions: 4.2.0 (inclusive) to 4.19.306 (excluded)
Linux Kernel Versions: 4.20 (inclusive) to 5.4.268 (excluded)
Linux Kernel versions: 5.5.0 (inclusive) to 5.10.209 (excluded)
Linux Kernel versions: 5.11.0 (inclusive) to 5.15.148 (exclusive)
Linux Kernel Versions: 5.16.0 (inclusive) to 6.1.75 (excluded)
Linux Kernel versions: 6.2.0 (inclusive) to 6.6.14 (exclusive)
Linux Kernel Versions: 6.7.0 (inclusive) to 6.7.2 (exclusive)

Resolved Vulnerabilities

Powerpc/pseries/memhp: Fix access beyond end of drmem array when LMB lookup does not match given entry Vulnerability in dlpar_memory_remove_by_index() could allow access beyond the boundaries of the drmem lmb array (CVE-2023-52451)

Use-after-free vulnerability in process_rx_list when put_page() in tls_decrypt_done dereferences and tries to read from a partially read skb (CVE-2024-26582)

Vulnerability triggering an unhandled page fault in the out-of-bounds memory access prevention test_tag test (CVE-2024-26588)

Out-of-bounds fix in init_smb2_rsp_hdr() Vulnerability where init_smb2_rsp_hdr is called for an smb1 negotiation request because need_neg is set to false if the client sends an smb2 negotiation request followed by an smb1 negotiation request (CVE-2023-52441)

Context disassociation vulnerability within the call stack (CVE-2023-52445)

Use-after-free take;weakness in bpf programs that access internals after an ops->map_free call completes (CVE-2023-52447)

Race condition vulnerability between btf_put() and map_free() (CVE-2023-52446)

Slub overflow vulnerability in key exchange code when authblob->SessionKey.Length is larger than session key size (CVE-2023-52440)

Use-after-free vulnerability in shinker callbacks (CVE-2023-52438)

Use-after-free vulnerability in uio_open (CVE-2023-52439)

Out-of-Band Vulnerability in smb2_parse_contexts() (CVE-2023-52434)

Stack corruption vulnerability where when a stack-correcting tc filter is first added to a net device, its local ports are bound to the device’s ACL group (CVE-2024-26586)

Accessible vulnerability for unit stack slots (CVE-2023-52452)

Vulnerability in alu denial of variable offset in PTR_TO_FLOW_KEYS (CVE-2024-26589)

Vulnerability in PTR_TO_FLOW_KEYS regarding direct damage caused by omission (CVE-2023-52444)

Vulnerability Patches

vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

CVE-2023-52451