Test ID:	1.3.6.1.4.1.25623.1.1.12.2023.6228.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6228-1)
Summary:	The remote host is missing an update for the 'linux-azure, linux-gcp, linux-ibm, linux-oracle' package(s) announced via the USN-6228-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-azure, linux-gcp, linux-ibm, linux-oracle' package(s) announced via the USN-6228-1 advisory. Vulnerability Insight: It was discovered that the XFS file system implementation in the Linux kernel did not properly perform metadata validation when mounting certain images. An attacker could use this to specially craft a file system image that, when mounted, could cause a denial of service (system crash). (CVE-2023-2124) Wei Chen discovered that the InfiniBand RDMA communication manager implementation in the Linux kernel contained an out-of-bounds read vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-2176) Affected Software/OS: 'linux-azure, linux-gcp, linux-ibm, linux-oracle' package(s) on Ubuntu 23.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-2124 Debian Security Information: DSA-5448 (Google Search) https://www.debian.org/security/2023/dsa-5448 Debian Security Information: DSA-5480 (Google Search) https://www.debian.org/security/2023/dsa-5480 https://syzkaller.appspot.com/bug?extid=7e9494b8b399902e994e https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/xfs/xfs_buf_item_recover.c?h=v6.4-rc1&id=22ed903eee23a5b174e240f1cdfa9acf393a5210 https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html Common Vulnerability Exposure (CVE) ID: CVE-2023-2176 https://www.spinics.net/lists/linux-rdma/msg114749.html
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.