{"id":"CLSA-2023-1682418814","summary":"Fix CVE(s): CVE-2023-1281, CVE-2022-3903, CVE-2023-26545","details":"\n   [ Ubuntu: 4.15.0-209.220 ]\n   * bionic/linux: 4.15.0-209.220 -proposed tracker (LP: #2011989)\n   * CVE-2023-26545\n     - net: mpls: fix stale pointer if allocation fails during device rename\n   * CVE-2023-1281\n     - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()\n     - net/sched: tcindex: update imperfect hash filters respecting rcu\n   * CVE-2022-3903\n     - USB: add usb_control_msg_send() and usb_control_msg_recv()\n     - USB: correct API of usb_control_msg_send/recv\n     - USB: move snd_usb_pipe_sanity_check into the USB core\n     - media: mceusb: Use new usb_control_msg_*() routines\n   * Bionic update: upstream stable patchset 2023-03-03 (LP: #2009237)\n     - pNFS/filelayout: Fix coalescing test for single DS\n     - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats\n     - RDMA/srp: Move large values to a new enum for gcc13\n     - f2fs: let's avoid panic if extent_tree is not created\n     - nilfs2: fix general protection fault in nilfs_btree_insert()\n     - xhci-pci: set the dma max_seg_size\n     - usb: xhci: Check endpoint is valid before dereferencing it\n     - prlimit: do_prlimit needs to have a speculation check\n     - USB: serial: option: add Quectel EM05-G (GR) modem\n     - USB: serial: option: add Quectel EM05-G (CS) modem\n     - USB: serial: option: add Quectel EM05-G (RS) modem\n     - USB: serial: option: add Quectel EC200U modem\n     - USB: serial: option: add Quectel EM05CN (SG) modem\n     - USB: serial: option: add Quectel EM05CN modem\n     - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100\n     - usb: core: hub: disable autosuspend for TI TUSB8041\n     - USB: serial: cp210x: add SCALANCE LPE-9000 device id\n     - usb: host: ehci-fsl: Fix module alias\n     - usb: gadget: g_webcam: Send color matching descriptor per frame\n     - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()\n     - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210\n     - serial: pch_uart: Pass correct sg to dma_unmap_sg()\n     - serial: atmel: fix incorrect baudrate setup\n     - gsmi: fix null-deref in gsmi_get_variable\n     - comedi: adv_pci1760: Fix PWM instruction handling\n     - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'\n     - HID: intel_ish-hid: Add check for ishtp_dma_tx_map\n     - EDAC/highbank: Fix memory leak in highbank_mc_probe()\n     - tomoyo: fix broken dependency on *.conf.default\n     - IB/hfi1: Reject a zero-length user expected buffer\n     - IB/hfi1: Reserve user expected TIDs\n     - affs: initialize fsdata in affs_truncate()\n     - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent\n     - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in\n       rockchip_usb2phy_power_on()\n     - net: nfc: Fix use-after-free in local_cleanup()\n     - net: usb: sr9700: Handle negative len\n     - net: mdio: validate parameter addr in mdiobus_get_phy()\n     - HID: check empty report_list in hid_validate_values()\n     - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait\n     - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request\n     - net: mlx5: eliminate anonymous module_init & module_exit\n     - dmaengine: Fix double increment of client_count in dma_chan_get()\n     - HID: betop: check shape of output reports\n     - w1: fix deadloop in __w1_remove_master_device()\n     - w1: fix WARNING after calling w1_process()\n     - fs: reiserfs: remove useless new_opts in reiserfs_remount\n     - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed\n     - scsi: hpsa: Fix allocation size for scsi_host_alloc()\n     - module: Don't wait for GOING modules\n     - tracing: Make sure trace_printk() can output as soon as it can be used\n     - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment\n     - EDAC/device: Respect any driver-supplied workqueue polling value\n     - netlink: annotate data races around dst_portid and dst_group\n     - netlink: annotate data races around sk_state\n     - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE\n     - netrom: Fix use-after-free of a listening socket.\n     - sctp: fail if no bound addresses can be used for a given scope\n     - net: ravb: Fix possible hang if RIS2_QFF1 happen\n     - net/tg3: resolve deadlock in tg3_reset_task() during EEH\n     - Revert \"Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI\n       mode\"\n     - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL\n     - xen: Fix up build warning with xen_init_time_ops() reference\n     - x86/asm: Fix an assembler warning with current binutils\n     - x86/entry/64: Add instruction suffix to SYSRET\n     - sysctl: add a new register_sysctl_init() interface\n     - panic: unset panic_on_warn inside panic()\n     - exit: Add and use make_task_dead.\n     - objtool: Add a missing comma to avoid string concatenation\n     - hexagon: Fix function name in die()\n     - h8300: Fix build errors from do_exit() to make_task_dead() transition\n     - ia64: make IA64_MCA_RECOVERY bool instead of tristate\n     - exit: Put an upper limit on how often we can oops\n     - exit: Expose \"oops_count\" to sysfs\n     - exit: Allow oops_limit to be disabled\n     - panic: Consolidate open-coded panic_on_warn checks\n     - panic: Introduce warn_limit\n     - panic: Expose \"warn_count\" to sysfs\n     - exit: Use READ_ONCE() for all oops/warn limit reads\n     - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags\n     - ipv6: ensure sane device mtu in tunnels\n     - usb: host: xhci-plat: add wakeup entry at sysfs\n     - amd-xgbe: Delay AN timeout during KR training\n     - tcp: avoid the lookup process failing to get sk in ehash table\n     - net: fix UaF in netns ops registration error path\n     - netlink: annotate data races around nlk-\u003eportid\n     - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()\n   * rtcpie in timers from ubuntu_kernel_selftests randomly failing\n     (LP: #1814234)\n     - SAUCE: selftest: rtctest: Fix force-passing unreliable subtest","modified":"2026-06-04T10:04:59.562130462Z","published":"2023-04-25T10:35:39Z","upstream":["CVE-2022-3903","CVE-2023-1281","CVE-2023-26545"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1682418814"}],"affected":[{"package":{"name":"linux-buildinfo-4.15.0-209-tuxcare.els7-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-buildinfo-4.15.0-209-tuxcare.els7-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-buildinfo-4.15.0-209-tuxcare.els7-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-buildinfo-4.15.0-209-tuxcare.els7-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-cloud-tools-4.15.0-209-tuxcare.els7-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-4.15.0-209-tuxcare.els7-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-cloud-tools-4.15.0-209-tuxcare.els7-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-4.15.0-209-tuxcare.els7-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-cloud-tools-generic-hwe-16.04","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-generic-hwe-16.04?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0.209.144"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-cloud-tools-lowlatency-hwe-16.04","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-lowlatency-hwe-16.04?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0.209.144"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-generic-hwe-16.04","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-generic-hwe-16.04?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0.209.144"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-headers-4.15.0-209-tuxcare.els7","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-4.15.0-209-tuxcare.els7?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-headers-4.15.0-209-tuxcare.els7-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-4.15.0-209-tuxcare.els7-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-headers-4.15.0-209-tuxcare.els7-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-4.15.0-209-tuxcare.els7-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-headers-generic-hwe-16.04","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-generic-hwe-16.04?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0.209.144"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-headers-lowlatency-hwe-16.04","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-lowlatency-hwe-16.04?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0.209.144"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-hwe-cloud-tools-4.15.0-209-tuxcare.els7","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-hwe-cloud-tools-4.15.0-209-tuxcare.els7?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-hwe-tools-4.15.0-209-tuxcare.els7","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-hwe-tools-4.15.0-209-tuxcare.els7?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-image-generic-hwe-16.04","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-image-generic-hwe-16.04?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0.209.144"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-image-lowlatency-hwe-16.04","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-image-lowlatency-hwe-16.04?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0.209.144"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-image-unsigned-4.15.0-209-tuxcare.els7-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-image-unsigned-4.15.0-209-tuxcare.els7-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-image-unsigned-4.15.0-209-tuxcare.els7-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-image-unsigned-4.15.0-209-tuxcare.els7-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-lowlatency-hwe-16.04","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-lowlatency-hwe-16.04?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0.209.144"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-modules-4.15.0-209-tuxcare.els7-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-modules-4.15.0-209-tuxcare.els7-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-modules-4.15.0-209-tuxcare.els7-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-modules-4.15.0-209-tuxcare.els7-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-modules-extra-4.15.0-209-tuxcare.els7-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-modules-extra-4.15.0-209-tuxcare.els7-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-source-4.15.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-source-4.15.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-tools-4.15.0-209-tuxcare.els7-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-4.15.0-209-tuxcare.els7-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-tools-4.15.0-209-tuxcare.els7-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-4.15.0-209-tuxcare.els7-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-209.220~16.04.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-tools-generic-hwe-16.04","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-generic-hwe-16.04?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0.209.144"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}},{"package":{"name":"linux-tools-lowlatency-hwe-16.04","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-lowlatency-hwe-16.04?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0.209.144"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1682418814.json"}}],"schema_version":"1.7.5"}