USN-6029-1: Linux kernel vulnerabilities

It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel contained a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2023-1281)

It was discovered that the infrared transceiver USB driver did not properly
handle USB control messages. A local attacker with physical access could
plug in a specially crafted USB device to cause a denial of service (memory
exhaustion). (CVE-2022-3903)

It was discovered that …

access code control crash cve denial of service device driver exhaustion free human kernel linux linux kernel local memory messages physical service support system traffic transceiver type confusion usb use-after-free usn vulnerabilities vulnerability