--- title: 'USN-5918-1: Linux kernel (BlueField) vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-5918-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-5918-1 --- # USN-5918-1: Linux kernel (BlueField) vulnerabilities Publication date 3 March 2023 Overview Several security issues were fixed in the Linux kernel. Releases [20.04 LTS](https://ubuntu.com/security/notices?release=focal) --- Open side navigation ## Packages * [linux-bluefield](https://ubuntu.com/security/cves?package=linux-bluefield) - Linux kernel for NVIDIA BlueField platforms ## Details It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. ([CVE-2022-43945](https://ubuntu.com/security/CVE-2022-43945)) Tamás Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. ([CVE-2022-42896](https://ubuntu.com/security/CVE-2022-42896)) It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did not properly perform bounds checking in some situations. A physically proximate attacker could use this to craft a malicious USB device that when inserted, could cause a denial of service (system crash) or possibly... --- Show more ## Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 20.04 LTS focal | [linux-image-bluefield](https://launchpad.net/ubuntu/+source/linux-meta-bluefield) –  [5.4.0.1058.53](https://launchpad.net/ubuntu/+source/linux-meta-bluefield/5.4.0.1058.53) | | | | [linux-image-5.4.0-1058-bluefield](https://launchpad.net/ubuntu/+source/linux-signed-bluefield) –  [5.4.0-1058.64](https://launchpad.net/ubuntu/+source/linux-signed-bluefield/5.4.0-1058.64) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References * [CVE-2023-20928](https://ubuntu.com/security/CVE-2023-20928) * [CVE-2022-45934](https://ubuntu.com/security/CVE-2022-45934) * [CVE-2022-43945](https://ubuntu.com/security/CVE-2022-43945) * [CVE-2022-42896](https://ubuntu.com/security/CVE-2022-42896) * [CVE-2022-42895](https://ubuntu.com/security/CVE-2022-42895) * [CVE-2022-41850](https://ubuntu.com/security/CVE-2022-41850) * [CVE-2022-41849](https://ubuntu.com/security/CVE-2022-41849) * [CVE-2022-3649](https://ubuntu.com/security/CVE-2022-3649) * [CVE-2022-3643](https://ubuntu.com/security/CVE-2022-3643) * [CVE-2022-3640](https://ubuntu.com/security/CVE-2022-3640) --- Show 1 more references ## Related notices id="usn" *Search* * [USN-7607-1](https://ubuntu.com/security/notices/USN-7607-1) * [USN-7607-2](https://ubuntu.com/security/notices/USN-7607-2) * [USN-7607-3](https://ubuntu.com/security/notices/USN-7607-3) * [USN-6031-1](https://ubuntu.com/security/notices/USN-6031-1) * [USN-6014-1](https://ubuntu.com/security/notices/USN-6014-1) * [USN-6013-1](https://ubuntu.com/security/notices/USN-6013-1) * [USN-6007-1](https://ubuntu.com/security/notices/USN-6007-1) * [USN-6001-1](https://ubuntu.com/security/notices/USN-6001-1) * [USN-5976-1](https://ubuntu.com/security/notices/USN-5976-1) * [USN-5975-1](https://ubuntu.com/security/notices/USN-5975-1) --- Show 58 more references --- Have additional questions? [Talk to a member of the team ›](https://wiki.ubuntu.com/SecurityTeam/FAQ?_ga=2.242131138.1744859116.1742138161-1500419473.1726851136&_gl=1*161muja*_gcl_au*MzUyMTIzNjI1LjE3MzYyNDQ4NTE.#Contact)