CVE-2023-0266

Note

the fix commit claims that the issues is only present in 5.13
and newer, but it's not clear why, from both the history of the
snd_ctl_elem_read() path and the compat path.
USN-5975-1 first publication included esm/xenial linux-gcp
version 4.15.0-1146.162~16.04.1 by mistake, it got fixed in version
4.15.0-1147.163~16.04.1 as published in USN-6009-1.

Parameter	Value
Base score	7.8
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Security

CVE-2023-0266

From the Ubuntu Security Team

Notes

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading

Package	Release	Status
linux Launchpad, Ubuntu, Debian	jammy	Released (5.15.0-69.76)
	kinetic	Released (5.19.0-38.39)
	lunar	Not vulnerable (6.1.0-16.16)
	trusty	Not vulnerable (3.11.0-12.19)
	xenial	Not vulnerable (4.4.0-2.16)
	focal	Released (5.4.0-144.161)
	bionic	Released (4.15.0-208.220)
	upstream	Released (6.2~rc4)
	Patches: Introduced by becf9e5d553c2389d857a3c178ce80fdb34a02e1 Fixed by 56b88b50565cd8b946a2d00b0c83927b7ebb055e\|local-CVE-2023-0266-fix
linux-aws Launchpad, Ubuntu, Debian	lunar	Not vulnerable (6.2.0-1002.2)
	upstream	Released (6.2~rc4)
	focal	Released (5.4.0-1097.105)
	kinetic	Released (5.19.0-1022.23)
	bionic	Released (4.15.0-1153.166)
	jammy	Released (5.15.0-1033.37)
	trusty	Not vulnerable (4.4.0-1002.2)
	xenial	Not vulnerable (4.4.0-1001.10)
linux-aws-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.3)
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	upstream	Released (6.2~rc4)
linux-aws-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Ignored (superseded by linux-aws-5.13)
	jammy	Does not exist
	kinetic	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-aws-5.13)
	xenial	Does not exist
linux-aws-5.13 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Ignored (superseded by linux-aws-5.15)
	jammy	Does not exist
	kinetic	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-aws-5.15)
	xenial	Does not exist
linux-aws-5.15 Launchpad, Ubuntu, Debian	bionic	Does not exist
	jammy	Does not exist