USN-5938-1: Linux kernel (GKE) vulnerabilities

It was discovered that the Upper Level Protocol (ULP) subsystem in the
Linux kernel did not properly handle sockets entering the LISTEN state in
certain protocols, leading to a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2023-0461)

Davide Ornaghi discovered that the netfilter subsystem in the Linux kernel
did not properly handle VLAN headers in some situations. A local attacker
could use this to cause a …

code crash cve denial of service free gke headers kernel linux linux kernel local netfilter protocol protocols service sockets state subsystem system use-after-free usn vlan vulnerabilities vulnerability