--- title: 'USN-6462-1: Linux kernel vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-6462-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-6462-1 --- # USN-6462-1: Linux kernel vulnerabilities Publication date 31 October 2023 Overview Several security issues were fixed in the Linux kernel. Releases [20.04 LTS](https://ubuntu.com/security/notices?release=focal) [18.04 LTS](https://ubuntu.com/security/notices?release=bionic) --- Open side navigation ## Packages * [linux](https://ubuntu.com/security/cves?package=linux) - Linux kernel * [linux-aws](https://ubuntu.com/security/cves?package=linux-aws) - Linux kernel for Amazon Web Services (AWS) systems * [linux-aws-5.4](https://ubuntu.com/security/cves?package=linux-aws-5.4) - Linux kernel for Amazon Web Services (AWS) systems * [linux-azure](https://ubuntu.com/security/cves?package=linux-azure) - Linux kernel for Microsoft Azure Cloud systems * [linux-azure-5.4](https://ubuntu.com/security/cves?package=linux-azure-5.4) - Linux kernel for Microsoft Azure cloud systems * [linux-bluefield](https://ubuntu.com/security/cves?package=linux-bluefield) - Linux kernel for NVIDIA BlueField platforms * [linux-gcp](https://ubuntu.com/security/cves?package=linux-gcp) - Linux kernel for Google Cloud Platform (GCP) systems * [linux-gcp-5.4](https://ubuntu.com/security/cves?package=linux-gcp-5.4) - Linux kernel for Google Cloud Platform (GCP) systems * [linux-gkeop](https://ubuntu.com/security/cves?package=linux-gkeop) - Linux kernel for Google Container Engine (GKE) systems * [linux-hwe-5.4](https://ubuntu.com/security/cves?package=linux-hwe-5.4) - Linux hardware enablement (HWE) kernel * [linux-ibm](https://ubuntu.com/security/cves?package=linux-ibm) - Linux kernel for IBM cloud systems * [linux-ibm-5.4](https://ubuntu.com/security/cves?package=linux-ibm-5.4) - Linux kernel for IBM cloud systems * [linux-kvm](https://ubuntu.com/security/cves?package=linux-kvm) - Linux kernel for cloud environments * [linux-oracle](https://ubuntu.com/security/cves?package=linux-oracle) - Linux kernel for Oracle Cloud systems * [linux-oracle-5.4](https://ubuntu.com/security/cves?package=linux-oracle-5.4) - Linux kernel for Oracle Cloud systems * [linux-raspi](https://ubuntu.com/security/cves?package=linux-raspi) - Linux kernel for Raspberry Pi systems * [linux-raspi-5.4](https://ubuntu.com/security/cves?package=linux-raspi-5.4) - Linux kernel for Raspberry Pi systems * [linux-xilinx-zynqmp](https://ubuntu.com/security/cves?package=linux-xilinx-zynqmp) - Linux kernel for Xilinx ZynqMP processors ## Details Seth Jenkins discovered that the Linux kernel did not properly perform address randomization for a per-cpu memory management structure. A local attacker could use this to expose sensitive information (kernel memory) or in conjunction with another kernel vulnerability. ([CVE-2023-0597](https://ubuntu.com/security/CVE-2023-0597)) Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in the Linux kernel contained a race condition, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service (system crash). ([CVE-2023-31083](https://ubuntu.com/security/CVE-2023-31083)) Lin Ma discovered that the Netlink Transformation (XFRM) subsystem in the Linux kernel contained a null pointer dereference vulnerability in some situations. A local privileged attacker could use this to cause a denial of service (system crash). ([CVE-2023-3772](https://ubuntu.com/security/CVE-2023-3772)) It was... --- Show more ## Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 20.04 LTS focal | [linux-image-5.4.0-1033-xilinx-zynqmp](https://launchpad.net/ubuntu/+source/linux-xilinx-zynqmp) –  [5.4.0-1033.37](https://launchpad.net/ubuntu/+source/linux-xilinx-zynqmp/5.4.0-1033.37) | | | | [linux-image-5.4.0-1060-ibm](https://launchpad.net/ubuntu/+source/linux-signed-ibm) –  [5.4.0-1060.65](https://launchpad.net/ubuntu/+source/linux-signed-ibm/5.4.0-1060.65) | | | | [linux-image-5.4.0-1074-bluefield](https://launchpad.net/ubuntu/+source/linux-signed-bluefield) –  [5.4.0-1074.80](https://launchpad.net/ubuntu/+source/linux-signed-bluefield/5.4.0-1074.80) | | | | [linux-image-5.4.0-1080-gkeop](https://launchpad.net/ubuntu/+source/linux-signed-gkeop) –  [5.4.0-1080.84](https://launchpad.net/ubuntu/+source/linux-signed-gkeop/5.4.0-1080.84) | | | | [linux-image-5.4.0-1097-raspi](https://launchpad.net/ubuntu/+source/linux-raspi) –  [5.4.0-1097.109](https://launchpad.net/ubuntu/+source/linux-raspi/5.4.0-1097.109) | | | | [linux-image-5.4.0-1102-kvm](https://launchpad.net/ubuntu/+source/linux-signed-kvm) –  [5.4.0-1102.108](https://launchpad.net/ubuntu/+source/linux-signed-kvm/5.4.0-1102.108) | | | | [linux-image-5.4.0-1112-oracle](https://launchpad.net/ubuntu/+source/linux-signed-oracle) –  [5.4.0-1112.121](https://launchpad.net/ubuntu/+source/linux-signed-oracle/5.4.0-1112.121) | | | | [linux-image-5.4.0-1113-aws](https://launchpad.net/ubuntu/+source/linux-signed-aws) –  [5.4.0-1113.123](https://launchpad.net/ubuntu/+source/linux-signed-aws/5.4.0-1113.123) | | | | [linux-image-5.4.0-1117-gcp](https://launchpad.net/ubuntu/+source/linux-signed-gcp) –  [5.4.0-1117.126](https://launchpad.net/ubuntu/+source/linux-signed-gcp/5.4.0-1117.126) | | | | [linux-image-5.4.0-1119-azure](https://launchpad.net/ubuntu/+source/linux-signed-azure) –  [5.4.0-1119.126](https://launchpad.net/ubuntu/+source/linux-signed-azure/5.4.0-1119.126) | | | | [linux-image-5.4.0-166-generic](https://launchpad.net/ubuntu/+source/linux-signed) –  [5.4.0-166.183](https://launchpad.net/ubuntu/+source/linux-signed/5.4.0-166.183) | | | | [linux-image-5.4.0-166-generic-lpae](https://launchpad.net/ubuntu/+source/linux) –  [5.4.0-166.183](https://launchpad.net/ubuntu/+source/linux/5.4.0-166.183) | | | | [linux-image-5.4.0-166-lowlatency](https://launchpad.net/ubuntu/+source/linux-signed) –  [5.4.0-166.183](https://launchpad.net/ubuntu/+source/linux-signed/5.4.0-166.183) | | | | [linux-image-aws-lts-20.04](https://launchpad.net/ubuntu/+source/linux-meta-aws) –  [5.4.0.1113.110](https://launchpad.net/ubuntu/+source/linux-meta-aws/5.4.0.1113.110) | | | | [linux-image-azure-lts-20.04](https://launchpad.net/ubuntu/+source/linux-meta-azure) –  [5.4.0.1119.112](https://launchpad.net/ubuntu/+source/linux-meta-azure/5.4.0.1119.112) | | | | [linux-image-bluefield](https://launchpad.net/ubuntu/+source/linux-meta-bluefield) –  [5.4.0.1074.69](https://launchpad.net/ubuntu/+source/linux-meta-bluefield/5.4.0.1074.69) | | | | [linux-image-gcp-lts-20.04](https://launchpad.net/ubuntu/+source/linux-meta-gcp) –  [5.4.0.1117.119](https://launchpad.net/ubuntu/+source/linux-meta-gcp/5.4.0.1117.119) | | | | [linux-image-generic](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.4.0.166.163](https://launchpad.net/ubuntu/+source/linux-meta/5.4.0.166.163) | | | | [linux-image-generic-lpae](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.4.0.166.163](https://launchpad.net/ubuntu/+source/linux-meta/5.4.0.166.163) | | | | [linux-image-gkeop](https://launchpad.net/ubuntu/+source/linux-meta-gkeop) –  [5.4.0.1080.78](https://launchpad.net/ubuntu/+source/linux-meta-gkeop/5.4.0.1080.78) | | | | [linux-image-gkeop-5.4](https://launchpad.net/ubuntu/+source/linux-meta-gkeop) –  [5.4.0.1080.78](https://launchpad.net/ubuntu/+source/linux-meta-gkeop/5.4.0.1080.78) | | | | [linux-image-ibm-lts-20.04](https://launchpad.net/ubuntu/+source/linux-meta-ibm) –  [5.4.0.1060.89](https://launchpad.net/ubuntu/+source/linux-meta-ibm/5.4.0.1060.89) | | | | [linux-image-kvm](https://launchpad.net/ubuntu/+source/linux-meta-kvm) –  [5.4.0.1102.97](https://launchpad.net/ubuntu/+source/linux-meta-kvm/5.4.0.1102.97) | | | | [linux-image-lowlatency](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.4.0.166.163](https://launchpad.net/ubuntu/+source/linux-meta/5.4.0.166.163) | | | | [linux-image-oem](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.4.0.166.163](https://launchpad.net/ubuntu/+source/linux-meta/5.4.0.166.163) | | | | [linux-image-oem-osp1](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.4.0.166.163](https://launchpad.net/ubuntu/+source/linux-meta/5.4.0.166.163) | | | | [linux-image-oracle-lts-20.04](https://launchpad.net/ubuntu/+source/linux-meta-oracle) –  [5.4.0.1112.105](https://launchpad.net/ubuntu/+source/linux-meta-oracle/5.4.0.1112.105) | | | | [linux-image-raspi](https://launchpad.net/ubuntu/+source/linux-meta-raspi) –  [5.4.0.1097.127](https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.4.0.1097.127) | | | | [linux-image-raspi2](https://launchpad.net/ubuntu/+source/linux-meta-raspi) –  [5.4.0.1097.127](https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.4.0.1097.127) | | | | [linux-image-virtual](https://launchpad.net/ubuntu/+source/linux-meta) –  [5.4.0.166.163](https://launchpad.net/ubuntu/+source/linux-meta/5.4.0.166.163) | | | | [linux-image-xilinx-zynqmp](https://launchpad.net/ubuntu/+source/linux-meta-xilinx-zynqmp) –  [5.4.0.1033.33](https://launchpad.net/ubuntu/+source/linux-meta-xilinx-zynqmp/5.4.0.1033.33) | | | | 18.04 LTS bionic | [linux-image-5.4.0-1060-ibm](https://launchpad.net/ubuntu/+source/linux-signed-ibm-5.4) –  5.4.0-1060.65~18.04.1   Ubuntu Pro | | | | [linux-image-5.4.0-1097-raspi](https://launchpad.net/ubuntu/+source/linux-raspi-5.4) –  5.4.0-1097.109~18.04.2   Ubuntu Pro | | | | [linux-image-5.4.0-1112-oracle](https://launchpad.net/ubuntu/+source/linux-signed-oracle-5.4) –  5.4.0-1112.121~18.04.4   Ubuntu Pro | | | | [linux-image-5.4.0-1113-aws](https://launchpad.net/ubuntu/+source/linux-signed-aws-5.4) –  5.4.0-1113.123~18.04.1   Ubuntu Pro | | | | [linux-image-5.4.0-1117-gcp](https://launchpad.net/ubuntu/+source/linux-signed-gcp-5.4) –  5.4.0-1117.126~18.04.1   Ubuntu Pro | | | | [linux-image-5.4.0-1119-azure](https://launchpad.net/ubuntu/+source/linux-signed-azure-5.4) –  5.4.0-1119.126~18.04.2   Ubuntu Pro | | | | [linux-image-5.4.0-166-generic](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.4) –  5.4.0-166.183~18.04.2   Ubuntu Pro | | | | [linux-image-5.4.0-166-lowlatency](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.4) –  5.4.0-166.183~18.04.2   Ubuntu Pro | | | | [linux-image-aws](https://launchpad.net/ubuntu/+source/linux-meta-aws-5.4) –  5.4.0.1113.91   Ubuntu Pro | | | | [linux-image-azure](https://launchpad.net/ubuntu/+source/linux-meta-azure-5.4) –  5.4.0.1119.92   Ubuntu Pro | | | | [linux-image-gcp](https://launchpad.net/ubuntu/+source/linux-meta-gcp-5.4) –  5.4.0.1117.93   Ubuntu Pro | | | | [linux-image-generic-hwe-18.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4) –  5.4.0.166.183~18.04.134   Ubuntu Pro | | | | [linux-image-ibm](https://launchpad.net/ubuntu/+source/linux-meta-ibm-5.4) –  5.4.0.1060.71   Ubuntu Pro | | | | [linux-image-lowlatency-hwe-18.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4) –  5.4.0.166.183~18.04.134   Ubuntu Pro | | | | [linux-image-oem](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4) –  5.4.0.166.183~18.04.134   Ubuntu Pro | | | | [linux-image-oem-osp1](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4) –  5.4.0.166.183~18.04.134   Ubuntu Pro | | | | [linux-image-oracle](https://launchpad.net/ubuntu/+source/linux-meta-oracle-5.4) –  5.4.0.1112.121~18.04.84   Ubuntu Pro | | | | [linux-image-raspi-hwe-18.04](https://launchpad.net/ubuntu/+source/linux-meta-raspi-5.4) –  5.4.0.1097.94   Ubuntu Pro | | | | [linux-image-snapdragon-hwe-18.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4) –  5.4.0.166.183~18.04.134   Ubuntu Pro | | | | [linux-image-virtual-hwe-18.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4) –  5.4.0.166.183~18.04.134   Ubuntu Pro | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References * [CVE-2023-4132](https://ubuntu.com/security/CVE-2023-4132) * [CVE-2023-3772](https://ubuntu.com/security/CVE-2023-3772) * [CVE-2023-31083](https://ubuntu.com/security/CVE-2023-31083) * [CVE-2023-0597](https://ubuntu.com/security/CVE-2023-0597) ## Related notices * [USN-6701-1](https://ubuntu.com/security/notices/USN-6701-1) * [USN-6701-2](https://ubuntu.com/security/notices/USN-6701-2) * [USN-6701-3](https://ubuntu.com/security/notices/USN-6701-3) * [USN-6701-4](https://ubuntu.com/security/notices/USN-6701-4) * [USN-6520-1](https://ubuntu.com/security/notices/USN-6520-1) * [USN-6516-1](https://ubuntu.com/security/notices/USN-6516-1) * [USN-6466-1](https://ubuntu.com/security/notices/USN-6466-1) * [USN-6465-1](https://ubuntu.com/security/notices/USN-6465-1) * [USN-6465-2](https://ubuntu.com/security/notices/USN-6465-2) * [USN-6465-3](https://ubuntu.com/security/notices/USN-6465-3) --- Show 19 more references --- Have additional questions? [Talk to a member of the team ›](https://wiki.ubuntu.com/SecurityTeam/FAQ?_ga=2.242131138.1744859116.1742138161-1500419473.1726851136&_gl=1*161muja*_gcl_au*MzUyMTIzNjI1LjE3MzYyNDQ4NTE.#Contact)