Critical Vulnerabilities in Linux Kernel Packages: USN-5390-1
Summary
USN-5390-1: David Bouman discovered that the netfilter subsystem in the Linux kernel did not properly validate passed user register indices. Affects linux versions < 5.15.0-27.28. Fixed in 5.15.0-27.28. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware, system resources, and providing essential services for applications. It is widely used across various distributions, including Ubuntu. The kernel's stability and security are paramount, as vulnerabilities can lead to severe consequences, including unauthorized access and system crashes.
Vulnerability Detail
The vulnerabilities identified in USN-5390-1 stem from issues within the netfilter subsystem and the ST21NFCA NFC driver of the Linux kernel. Specifically, the netfilter subsystem failed to validate user register indices, potentially allowing local attackers to execute arbitrary code or cause a denial of service. Additionally, improper memory initialization could expose sensitive kernel memory to attackers. The ST21NFCA NFC driver inadequately validated data sizes in EVT_TRANSACTION events, which could lead to system crashes or arbitrary code execution by physically proximate attackers.
How To Fix
Minimum fixed version
5.15.0-27.28
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the affected systems and limit user permissions to mitigate the risk of exploitation until the packages are updated.
Conclusion
The vulnerabilities outlined in USN-5390-1 highlight critical security risks within the Linux kernel packages. It is crucial for users to update their systems promptly to the patched versions to safeguard against potential exploits. Regular monitoring and vulnerability management practices, such as using tools like Vulert, can help maintain system security.
See every vulnerability recorded for linux →
FAQ
USN-5390-1 is a security notice issued for vulnerabilities found in various Linux kernel packages, which could lead to denial of service or arbitrary code execution.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
The vulnerabilities could allow local attackers to execute arbitrary code, expose sensitive information, or cause system crashes, leading to significant security risks.
Yes, patched versions of the affected packages are available. Users should update their systems to the latest versions to mitigate the vulnerabilities.
If immediate updates are not possible, consider restricting access to the affected systems and limiting user permissions as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
