USN-6007-1: Linux kernel (GCP) vulnerabilities

It was discovered that the Upper Level Protocol (ULP) subsystem in the
Linux kernel did not properly handle sockets entering the LISTEN state in
certain protocols, leading to a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2023-0461)

It was discovered that an out-of-bounds write vulnerability existed in the
Video for Linux 2 (V4L2) implementation in the Linux kernel. A local
attacker could use this to cause …

code crash cve denial of service free gcp kernel linux linux kernel local out-of-bounds out-of-bounds write protocol protocols service sockets state subsystem system use-after-free usn video vulnerabilities vulnerability