USN-6635-1: Linux kernel (GCP) vulnerabilities

It was discovered that the USB subsystem in the Linux kernel contained a
race condition while handling device descriptors in certain situations,
leading to a out-of-bounds read vulnerability. A local attacker could
possibly use this to cause a denial of service (system crash).
(CVE-2023-37453)

Lucas Leong discovered that the netfilter subsystem in the Linux kernel did
not properly validate some attributes passed from userspace. A local
attacker could use this to cause a denial of service (system crash) or
possibly …

attacker crash cve denial of service device gcp handling kernel linux linux kernel local netfilter out-of-bounds race race condition service subsystem system usb usn vulnerabilities vulnerability