Canonical

Ubuntu Pro 20.04 LTS

8175 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2023-6610

Exploit
  • EPSS 0.43%
  • Veröffentlicht 08.12.2023 17:15:07
  • Zuletzt bearbeitet 25.08.2026 18:17:50

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

7.8

CVE-2023-33053

  • EPSS 0.14%
  • Veröffentlicht 05.12.2023 03:15:11
  • Zuletzt bearbeitet 11.08.2025 15:06:17

Memory corruption in Kernel while parsing metadata.

6.4

CVE-2023-39198

  • EPSS 0.42%
  • Veröffentlicht 09.11.2023 20:15:08
  • Zuletzt bearbeitet 24.03.2026 12:16:07

A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allow...

6.3

CVE-2023-3397

  • EPSS 0.21%
  • Veröffentlicht 01.11.2023 20:15:08
  • Zuletzt bearbeitet 21.11.2024 08:17:11

A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a local attacker with normal user privileges to crash the system or leak internal kernel information.

4.7

CVE-2023-20569

Medienbericht Exploit
  • EPSS 6.71%
  • Veröffentlicht 08.08.2023 18:15:11
  • Zuletzt bearbeitet 21.11.2024 07:41:08

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure. ...

5.5

CVE-2023-4133

  • EPSS 0.23%
  • Veröffentlicht 03.08.2023 15:15:33
  • Zuletzt bearbeitet 21.11.2024 08:34:27

A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the s...

4.6

CVE-2023-4010

Exploit
  • EPSS 0.6%
  • Veröffentlicht 31.07.2023 17:15:10
  • Zuletzt bearbeitet 25.08.2026 18:17:03

Rejected reason: Rejected because the CVE description attributes a vulnerability to a non-existent Linux kernel function (usb_giveback_urb()) and the reported issue cannot be mapped to any valid codebase.

7.8

CVE-2023-2640

Exploit
  • EPSS 16.05%
  • Veröffentlicht 26.07.2023 02:15:09
  • Zuletzt bearbeitet 21.11.2024 07:58:59

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the uppe...

7.8

CVE-2023-3640

  • EPSS 0.76%
  • Veröffentlicht 24.07.2023 16:15:13
  • Zuletzt bearbeitet 21.07.2026 19:17:08

A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Ra...

5.5

CVE-2023-0160

Exploit
  • EPSS 0.29%
  • Veröffentlicht 18.07.2023 17:15:11
  • Zuletzt bearbeitet 21.11.2024 07:36:39

A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the system.