mickmick.net

Debian Linux Kernel Multiple Vulnerabilities

Release Date: 15 Aug 2023

RISK: Medium Risk

TYPE: Operating Systems - Linux

Multiple vulnerabilities were identified in Debian Linux Kernel. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege and sensitive information disclosure on the targeted system.

---

Impact

• Elevation of Privilege
• Information Disclosure

---

System / Technologies affected

• Debian 10 buster versions prior to 5.10.179-5~deb10u1
• Debian bullseye versions prior to 5.10.179-5
• Debian bookworm versions prior to 6.1.38-4

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://lists.debian.org/debian-security-announce/2023/msg00167.html
• https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html

---

Vulnerability Identifier

• CVE-2022-40982
• CVE-2023-20569

---

Source

• AusCERT
• Debian

---

Related Link

• https://www.auscert.org.au/bulletins/ESB-2023.4662
• https://www.auscert.org.au/bulletins/ESB-2023.4658
• https://lists.debian.org/debian-security-announce/2023/msg00167.html
• https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html