From f6c4d9e6a7bb437379cf350e525e574971dff9f0 Mon Sep 17 00:00:00 2001 From: Salvatore Bonaccorso Date: Mon, 1 Jan 2024 09:53:25 +0100 Subject: Add draft texts for some CVEs covered in the 6.1.69-1 update --- dsa-texts/6.1.69-1 | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) (limited to 'dsa-texts') diff --git a/dsa-texts/6.1.69-1 b/dsa-texts/6.1.69-1 index 85f6b7df..df8090da 100644 --- a/dsa-texts/6.1.69-1 +++ b/dsa-texts/6.1.69-1 @@ -6,9 +6,31 @@ may lead to a privilege escalation, denial of service or information leaks. CVE-2023-6531 + + Jann Horn discovered a use-after-free flaw due to a race condition + problem when the unix garbage collector's deletion of a SKB races + with unix_stream_read_generic() on the socket that the SKB is + queued on. + CVE-2023-6622 + + Xingyuan Mo discovered a flaw in the netfilter subsystem which may + result in denial of service or privilege escalation for a user with + the CAP_NET_ADMIN capability in any user or network namespace. + CVE-2023-6817 + + Xingyuan Mo discovered that a use-after-free in Netfilter's + implementation of PIPAPO (PIle PAcket POlicies) may result in denial + of service or potential local privilege escalation for a user with + the CAP_NET_ADMIN capability in any user or network namespace. + CVE-2023-6931 + + Budimir Markovic reported a heap out-of-bounds write vulnerability + in the Linux kernel's Performance Events system which may result in + denial of service or privilege escalation. + CVE-2023-51779 CVE-2023-51780 CVE-2023-51781 -- cgit v1.2.3