Canonical releases Ubuntu kernel security update to fix 3 high-risk vulnerabilities

CTOnews.com, June 30, Canonical today released a Linux Kernel security update for all supported Ubuntu distributions, fixing three high-risk vulnerabilities in previous versions.

The applicable Ubuntu version is attached to CTOnews.com:

Ubuntu 23.04 (Lunar Lobster) running Linux Kernel 6.2,

Ubuntu 22.10 (Kinetic Kudu) running Linux Kernel 5.19

Ubuntu 22.04 LTS (Jammy Jellyfish) running Linux Kernel 5.15 LTS or 5.19 HWE

Ubuntu 20.04LTS (Focal Fossa) running Linux Kernel 5.4or5.15HWE

Ubuntu 18.04 ESM running Linux Kernel 5.4 HWE

This update mainly fixes the following three security vulnerabilities:

An out-of-bounds write vulnerability discovered by CVE-2023-35788:Hangyu Hua in the Flower classifier implementation of the Linux kernel could allow an attacker to cause a denial of service (system crash) or execute arbitrary code.

CVE-2023-2430: found in Ubuntu 22.10 and Ubuntu 22.04 LTS distributions running Linux Kernel 5.19

The vulnerability, discovered by Xingyuan Mo and Gengjia Chen, exists in the io_uring subsystem and allows local attackers to cause a denial of service.

Intel processor vulnerabilities: the new Linux kernel security update also fixes a bug that affects Intel processors due to the failure of the INVLPG instruction implementation to properly refresh global TLB entries when PCID is enabled. This flaw could allow an attacker to expose sensitive information (kernel memory) or could lead to unexpected behavior.