USN-6700-2: Linux kernel (AWS) vulnerabilities

It was discovered that the Layer 2 Tunneling Protocol (L2TP) implementation
in the Linux kernel contained a race condition when releasing PPPoL2TP
sockets in certain conditions, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2022-20567)

It was discovered that the ext4 file system implementation in the Linux
kernel did not properly handle block device modification while it is
mounted. A privileged attacker could use …

arbitrary code attacker aws code conditions crash cve denial of service free implementation kernel layer 2 linux linux kernel local protocol race race condition service sockets system tunneling use-after-free usn vulnerabilities vulnerability