USN-5976-1: Linux kernel (OEM) vulnerabilities

It was discovered that the Upper Level Protocol (ULP) subsystem in the
Linux kernel did not properly handle sockets entering the LISTEN state in
certain protocols, leading to a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2023-0461)

It was discovered that the KVM VMX implementation in the Linux kernel did
not properly handle indirect branch prediction isolation between L1 and L2
VMs. An attacker in a …

code crash cve denial of service free host information isolation kernel linux linux kernel local oem prediction protocol protocols sensitive information service sockets state subsystem system use-after-free usn vms vmx vulnerabilities vulnerability