--- title: 'USN-5879-1: Linux kernel (HWE) vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-5879-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-5879-1 --- # USN-5879-1: Linux kernel (HWE) vulnerabilities Publication date 16 February 2023 Overview Several security issues were fixed in the Linux kernel. Releases [22.04 LTS](https://ubuntu.com/security/notices?release=jammy) --- Open side navigation ## Packages * [linux-hwe-5.19](https://ubuntu.com/security/cves?package=linux-hwe-5.19) - Linux hardware enablement (HWE) kernel ## Details Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. ([CVE-2022-4378](https://ubuntu.com/security/CVE-2022-4378)) Tamás Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. ([CVE-2022-42896](https://ubuntu.com/security/CVE-2022-42896)) It was discovered that the Bluetooth HCI implementation in the Linux kernel did not properly deallocate memory in some situations. An attacker could possibly use this cause a denial of service (memory exhaustion). ([CVE-2022-3619](https://ubuntu.com/security/CVE-2022-3619)) It was discovered that the Broadcom FullMAC USB WiFi driver in the... --- Show more ## Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 22.04 LTS jammy | [linux-image-5.19.0-32-generic-64k](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.19) –  [5.19.0-32.33~22.04.1](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.19/5.19.0-32.33~22.04.1) | | | | [linux-image-generic-64k-hwe-22.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.19) –  [5.19.0.32.33~22.04.9](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.19/5.19.0.32.33~22.04.9) | | | | [linux-image-generic-hwe-22.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.19) –  [5.19.0.32.33~22.04.9](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.19/5.19.0.32.33~22.04.9) | | | | [linux-image-generic-lpae-hwe-22.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.19) –  [5.19.0.32.33~22.04.9](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.19/5.19.0.32.33~22.04.9) | | | | [linux-image-virtual-hwe-22.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.19) –  [5.19.0.32.33~22.04.9](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.19/5.19.0.32.33~22.04.9) | | | | [linux-image-5.19.0-32-generic](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.19) –  [5.19.0-32.33~22.04.1](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.19/5.19.0-32.33~22.04.1) | | | | [linux-image-5.19.0-32-generic-lpae](https://launchpad.net/ubuntu/+source/linux-hwe-5.19) –  [5.19.0-32.33~22.04.1](https://launchpad.net/ubuntu/+source/linux-hwe-5.19/5.19.0-32.33~22.04.1) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References * [CVE-2023-0590](https://ubuntu.com/security/CVE-2023-0590) * [CVE-2022-45934](https://ubuntu.com/security/CVE-2022-45934) * [CVE-2022-4378](https://ubuntu.com/security/CVE-2022-4378) * [CVE-2022-42896](https://ubuntu.com/security/CVE-2022-42896) * [CVE-2022-42895](https://ubuntu.com/security/CVE-2022-42895) * [CVE-2022-3643](https://ubuntu.com/security/CVE-2022-3643) * [CVE-2022-3640](https://ubuntu.com/security/CVE-2022-3640) * [CVE-2022-3628](https://ubuntu.com/security/CVE-2022-3628) * [CVE-2022-3619](https://ubuntu.com/security/CVE-2022-3619) ## Related notices id="usn" *Search* * [USN-7607-1](https://ubuntu.com/security/notices/USN-7607-1) * [USN-7607-2](https://ubuntu.com/security/notices/USN-7607-2) * [USN-7607-3](https://ubuntu.com/security/notices/USN-7607-3) * [USN-6337-1](https://ubuntu.com/security/notices/USN-6337-1) * [USN-6331-1](https://ubuntu.com/security/notices/USN-6331-1) * [USN-6314-1](https://ubuntu.com/security/notices/USN-6314-1) * [USN-6312-1](https://ubuntu.com/security/notices/USN-6312-1) * [USN-6301-1](https://ubuntu.com/security/notices/USN-6301-1) * [USN-6284-1](https://ubuntu.com/security/notices/USN-6284-1) * [USN-6014-1](https://ubuntu.com/security/notices/USN-6014-1) --- Show 47 more references --- Have additional questions? [Talk to a member of the team ›](https://wiki.ubuntu.com/SecurityTeam/FAQ?_ga=2.242131138.1744859116.1742138161-1500419473.1726851136&_gl=1*161muja*_gcl_au*MzUyMTIzNjI1LjE3MzYyNDQ4NTE.#Contact)