Test ID:	1.3.6.1.4.1.25623.1.1.12.2023.6220.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6220-1)
Summary:	The remote host is missing an update for the 'linux-azure, linux-gcp, linux-ibm, linux-oracle' package(s) announced via the USN-6220-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-azure, linux-gcp, linux-ibm, linux-oracle' package(s) announced via the USN-6220-1 advisory. Vulnerability Insight: Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-35788, LP: #2023577) It was discovered that for some Intel processors the INVLPG instruction implementation did not properly flush global TLB entries when PCIDs are enabled. An attacker could use this to expose sensitive information (kernel memory) or possibly cause undesired behaviors. (LP: #2023220) Affected Software/OS: 'linux-azure, linux-gcp, linux-ibm, linux-oracle' package(s) on Ubuntu 23.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-35788 Debian Security Information: DSA-5448 (Google Search) https://www.debian.org/security/2023/dsa-5448 Debian Security Information: DSA-5480 (Google Search) https://www.debian.org/security/2023/dsa-5480 http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.7 https://git.kernel.org/linus/4d56304e5827c8cc8cc18c75343d283af7c4825c https://www.openwall.com/lists/oss-security/2023/06/07/1 https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html http://www.openwall.com/lists/oss-security/2023/06/17/1
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.