-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2023.2253
              USN-6033-1: Linux kernel (OEM) vulnerabilities
                               20 April 2023

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           Linux kernel (OEM)
Publisher:         Ubuntu
Operating System:  Ubuntu
Resolution:        Patch/Upgrade
CVE Names:         CVE-2023-30456 CVE-2023-28866 CVE-2023-28466
                   CVE-2023-25012 CVE-2023-1998 CVE-2023-1990
                   CVE-2023-1989 CVE-2023-1855 CVE-2023-1829
                   CVE-2023-1670 CVE-2023-1583 CVE-2023-1118
                   CVE-2023-1079 CVE-2023-1077 CVE-2023-1076
                   CVE-2023-1032 CVE-2022-4269 

Original Bulletin: 
   https://ubuntu.com/security/notices/USN-6033-1

Comment: CVSS (Max):  7.8 CVE-2023-30456 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
         CVSS Source: [NVD], Red Hat
         Calculator:  https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

- --------------------------BEGIN INCLUDED TEXT--------------------

USN-6033-1: Linux kernel (OEM) vulnerabilities

19 April 2023

Several security issues were fixed in the Linux kernel.


Releases

  o Ubuntu 22.04 LTS

Packages

  o linux-oem-6.1 - Linux kernel for OEM systems

Details

It was discovered that the Traffic-Control Index (TCINDEX) implementation
in the Linux kernel did not properly perform filter deactivation in some
situations. A local attacker could possibly use this to gain elevated
privileges. Please note that with the fix for this CVE, kernel support for
the TCINDEX classifier has been removed. ( CVE-2023-1829 )

William Zhao discovered that the Traffic Control (TC) subsystem in the
Linux kernel did not properly handle network packet retransmission in
certain situations. A local attacker could use this to cause a denial of
service (kernel deadlock). ( CVE-2022-4269 )

Thadeu Cascardo discovered that the io_uring subsystem contained a double-
free vulnerability in certain memory allocation error conditions. A local
attacker could possibly use this to cause a denial of service (system
crash). ( CVE-2023-1032 )

It was discovered that the TUN/TAP driver in the Linux kernel did not
properly initialize socket data. A local attacker could use this to cause a
denial of service (system crash). ( CVE-2023-1076 )

It was discovered that the Real-Time Scheduling Class implementation in the
Linux kernel contained a type confusion vulnerability in some situations. A
local attacker could use this to cause a denial of service (system crash).
( CVE-2023-1077 )

It was discovered that the ASUS HID driver in the Linux kernel did not
properly handle device removal, leading to a use-after-free vulnerability.
A local attacker with physical access could plug in a specially crafted USB
device to cause a denial of service (system crash). ( CVE-2023-1079 )

It was discovered that the io_uring subsystem in the Linux kernel did not
properly perform file table updates in some situations, leading to a null
pointer dereference vulnerability. A local attacker could use this to cause
a denial of service (system crash). ( CVE-2023-1583 )

It was discovered that the Xircom PCMCIA network device driver in the Linux
kernel did not properly handle device removal events. A physically
proximate attacker could use this to cause a denial of service (system
crash). ( CVE-2023-1670 )

It was discovered that the APM X-Gene SoC hardware monitoring driver in the
Linux kernel contained a race condition, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or expose sensitive information (kernel memory).
( CVE-2023-1855 )

It was discovered that a race condition existed in the Bluetooth HCI SDIO
driver, leading to a use-after-free vulnerability. A local attacker could
use this to cause a denial of service (system crash). ( CVE-2023-1989 )

It was discovered that the ST NCI NFC driver did not properly handle device
removal events. A physically proximate attacker could use this to cause a
denial of service (system crash). ( CVE-2023-1990 )

Jose Oliveira and Rodrigo Branco discovered that the Spectre Variant 2
mitigations with prctl syscall were insufficient in some situations. A
local attacker could possibly use this to expose sensitive information.
( CVE-2023-1998 )

It was discovered that the BigBen Interactive Kids' gamepad driver in the
Linux kernel did not properly handle device removal, leading to a use-
after-free vulnerability. A local attacker with physical access could plug
in a specially crafted USB device to cause a denial of service (system
crash). ( CVE-2023-25012 )

It was discovered that a race condition existed in the TLS subsystem in the
Linux kernel, leading to a use-after-free or a null pointer dereference
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. ( CVE-2023-28466 )

It was discovered that the Bluetooth subsystem in the Linux kernel did not
properly initialize some data structures, leading to an out-of-bounds
access vulnerability in certain situations. An attacker could use this to
expose sensitive information (kernel memory). ( CVE-2023-28866 )

Reima Ishii discovered that the nested KVM implementation for Intel x86
processors in the Linux kernel did not properly validate control registers
in certain situations. An attacker in a guest VM could use this to cause a
denial of service (guest crash). ( CVE-2023-30456 )

Duoming Zhou discovered that a race condition existed in the infrared
receiver/transceiver driver in the Linux kernel, leading to a use-after-
free vulnerability. A privileged attacker could use this to cause a denial
of service (system crash) or possibly execute arbitrary code.
( CVE-2023-1118 )


Update instructions

The problem can be corrected by updating your system to the following package
versions:

Ubuntu 22.04

  o linux-image-6.1.0-1009-oem - 6.1.0-1009.9
  o linux-image-oem-22.04c - 6.1.0.1009.9

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

  o CVE-2023-1076
  o CVE-2023-1118
  o CVE-2023-25012
  o CVE-2023-1855
  o CVE-2023-1990
  o CVE-2023-28866
  o CVE-2023-1998
  o CVE-2023-1077
  o CVE-2023-1583
  o CVE-2023-1670
  o CVE-2023-1032
  o CVE-2023-1079
  o CVE-2023-30456
  o CVE-2023-28466
  o CVE-2023-1989
  o CVE-2023-1829
  o CVE-2022-4269

Related notices

  o USN-6001-1 : linux-aws, linux-image-4.4.0-1155-aws,
    linux-modules-extra-4.4.0-1155-aws, linux-aws-headers-4.4.0-1155,
    linux-cloud-tools-4.4.0-1155-aws, linux-aws-cloud-tools-4.4.0-1155,
    linux-modules-extra-aws, linux-tools-aws, linux-tools-4.4.0-1155-aws,
    linux-modules-4.4.0-1155-aws, linux-buildinfo-4.4.0-1155-aws,
    linux-headers-4.4.0-1155-aws, linux-image-aws, linux-aws-tools-4.4.0-1155,
    linux-headers-aws
  o USN-6013-1 : linux-buildinfo-4.4.0-1117-aws, linux-image-4.4.0-1117-aws,
    linux-headers-4.4.0-1117-aws, linux-aws, linux-aws-tools-4.4.0-1117,
    linux-aws-cloud-tools-4.4.0-1117, linux-aws-headers-4.4.0-1117,
    linux-tools-aws, linux-modules-4.4.0-1117-aws, linux-image-aws,
    linux-cloud-tools-4.4.0-1117-aws, linux-tools-4.4.0-1117-aws,
    linux-headers-aws
  o USN-6014-1 : linux-cloud-tools-lowlatency-lts-vivid,
    linux-virtual-lts-wily, linux-cloud-tools-virtual-lts-xenial,
    linux-image-generic-lts-utopic, linux-tools-4.4.0-1118-kvm,
    linux-image-generic, linux-image-unsigned-4.4.0-239-lowlatency,
    linux-headers-4.4.0-239-lowlatency, linux-tools-generic-lts-vivid,
    linux-lowlatency, linux-lowlatency-lts-utopic, linux-hwe-generic-trusty,
    linux-signed-image-lowlatency-lts-xenial, linux-image-virtual-lts-wily,
    linux-kvm-headers-4.4.0-1118, linux-crashdump,
    linux-headers-lowlatency-lts-vivid, linux-image-generic-lts-vivid,
    linux-tools-host, linux-tools-generic-lts-xenial, linux-image-kvm,
    linux-cloud-tools-virtual-lts-utopic, linux-tools-generic,
    linux-hwe-virtual-trusty, linux-virtual-lts-xenial, linux-lts-xenial,
    linux-doc, linux-signed-lowlatency-lts-xenial,
    linux-buildinfo-4.4.0-239-lowlatency, linux-tools-lowlatency-lts-wily,
    linux-image-virtual, linux-tools-kvm, linux-headers-virtual-lts-wily,
    linux-headers-generic-lts-utopic, linux-generic-lts-xenial,
    linux-modules-4.4.0-239-generic, linux-cloud-tools-generic-lts-vivid,
    linux-image-hwe-virtual-trusty, linux-image-virtual-lts-vivid,
    linux-lowlatency-lts-vivid, linux-cloud-tools-generic-lts-wily,
    linux-signed-generic-lts-xenial, linux-signed-image-generic,
    linux-headers-virtual, linux-tools-4.4.0-239,
    linux-signed-generic-lts-utopic, linux-cloud-tools-4.4.0-239-lowlatency,
    linux-cloud-tools-4.4.0-239, linux-headers-generic-lts-vivid,
    linux-lowlatency-lts-wily, linux-signed-image-lowlatency-lts-wily,
    linux-headers-4.4.0-239-generic, linux-signed-image-generic-lts-vivid,
    linux-headers-4.4.0-1118-kvm, linux-image-lowlatency-lts-utopic,
    linux-signed-image-generic-lts-utopic, linux-tools-lowlatency,
    linux-image-4.4.0-239-lowlatency, linux-headers-generic,
    linux-tools-virtual-lts-utopic, linux-generic-lts-utopic,
    linux-image-virtual-lts-xenial, linux-lts-xenial-cloud-tools-4.4.0-239,
    linux-lowlatency-lts-xenial, linux-headers-lowlatency-lts-xenial,
    linux-headers-virtual-lts-utopic, linux-generic-lts-vivid,
    linux-cloud-tools-common, linux-signed-generic-lts-wily,
    linux-headers-lowlatency-lts-wily, linux-buildinfo-4.4.0-1118-kvm,
    linux-image-extra-virtual-lts-vivid, linux-image-4.4.0-239-generic,
    linux-generic, linux-kvm-cloud-tools-4.4.0-1118,
    linux-tools-lowlatency-lts-utopic, linux-generic-lts-wily,
    linux-tools-virtual-lts-vivid, linux-image-generic-lts-wily,
    linux-tools-virtual-lts-xenial, linux-image-extra-virtual-lts-wily,
    linux-tools-generic-lts-utopic, linux-cloud-tools-generic-lts-xenial,
    linux-tools-virtual, linux-signed-generic, linux-signed-lowlatency,
    linux-headers-4.4.0-239, linux-modules-4.4.0-1118-kvm,
    linux-image-lowlatency, linux-virtual, linux-headers-generic-lts-xenial,
    linux-headers-lowlatency, linux-image-lowlatency-lts-vivid,
    linux-cloud-tools-lowlatency-lts-xenial, linux-kvm-tools-4.4.0-1118,
    linux-cloud-tools-4.4.0-1118-kvm, linux-source-4.4.0,
    linux-cloud-tools-virtual-lts-wily, linux-tools-lowlatency-lts-vivid,
    linux-cloud-tools-virtual, linux-tools-lowlatency-lts-xenial,
    linux-image-lowlatency-lts-wily, linux-image-generic-lts-xenial,
    linux-image-lowlatency-lts-xenial, linux-cloud-tools-generic-lts-utopic,
    linux-signed-generic-lts-vivid, linux-image-4.4.0-1118-kvm,
    linux-image-unsigned-4.4.0-239-generic, linux-tools-lts-utopic,
    linux-cloud-tools-virtual-lts-vivid, linux-signed-lowlatency-lts-wily,
    linux-virtual-lts-vivid, linux-signed-image-generic-lts-xenial,
    linux-cloud-tools-generic, linux-signed-image-generic-lts-wily,
    linux-tools-4.4.0-239-lowlatency, linux-image-extra-virtual-lts-xenial,
    linux-image-virtual-lts-utopic, linux-buildinfo-4.4.0-239-generic,
    linux-lts-xenial-tools-4.4.0-239, linux-cloud-tools-4.4.0-239-generic,
    linux-cloud-tools-lowlatency-lts-utopic,
    linux-image-extra-virtual-lts-utopic, linux-virtual-lts-utopic,
    linux-headers-virtual-lts-xenial, linux-image-extra-virtual,
    linux-modules-extra-4.4.0-239-generic,
    linux-cloud-tools-lowlatency-lts-wily, linux,
    linux-tools-4.4.0-239-generic, linux-headers-kvm,
    linux-headers-virtual-lts-vivid, linux-signed-image-lowlatency,
    linux-tools-generic-lts-wily, linux-source, linux-image-hwe-generic-trusty,
    linux-headers-generic-lts-wily, linux-headers-lowlatency-lts-utopic,
    linux-modules-4.4.0-239-lowlatency, linux-tools-common,
    linux-tools-virtual-lts-wily, linux-kvm, linux-libc-dev,
    linux-cloud-tools-lowlatency
  o USN-6031-1 : linux-modules-ivsc-5.17.0-1030-oem,
    linux-modules-ivsc-oem-22.04a, linux-image-oem-22.04,
    linux-headers-oem-22.04, linux-tools-oem-22.04,
    linux-modules-iwlwifi-oem-22.04a, linux-modules-ivsc-oem-22.04,
    linux-oem-5.17-tools-host, linux-image-unsigned-5.17.0-1030-oem,
    linux-modules-ipu6-5.17.0-1030-oem, linux-tools-5.17.0-1030-oem,
    linux-tools-oem-22.04a, linux-headers-5.17.0-1030-oem,
    linux-image-5.17.0-1030-oem, linux-oem-5.17-tools-5.17.0-1030,
    linux-oem-5.17, linux-modules-ipu6-oem-22.04,
    linux-oem-5.17-headers-5.17.0-1030, linux-oem-22.04a,
    linux-modules-5.17.0-1030-oem, linux-image-oem-22.04a,
    linux-modules-iwlwifi-5.17.0-1030-oem, linux-oem-22.04,
    linux-headers-oem-22.04a, linux-modules-ipu6-oem-22.04a,
    linux-buildinfo-5.17.0-1030-oem, linux-modules-iwlwifi-oem-22.04
  o USN-6032-1 : linux-modules-ivsc-oem-22.04b,
    linux-image-unsigned-6.0.0-1014-oem, linux-modules-ipu6-6.0.0-1014-oem,
    linux-image-6.0.0-1014-oem, linux-image-oem-22.04b,
    linux-modules-iwlwifi-6.0.0-1014-oem, linux-oem-6.0-tools-host,
    linux-tools-6.0.0-1014-oem, linux-oem-6.0, linux-headers-6.0.0-1014-oem,
    linux-modules-ivsc-6.0.0-1014-oem, linux-buildinfo-6.0.0-1014-oem,
    linux-headers-oem-22.04b, linux-oem-6.0-tools-6.0.0-1014,
    linux-modules-ipu6-oem-22.04b, linux-modules-iwlwifi-oem-22.04b,
    linux-oem-22.04b, linux-modules-6.0.0-1014-oem, linux-tools-oem-22.04b,
    linux-oem-6.0-headers-6.0.0-1014
  o USN-5977-1 : linux-modules-ivsc-oem-22.04b,
    linux-oem-6.0-headers-6.0.0-1013, linux-image-unsigned-6.0.0-1013-oem,
    linux-modules-ipu6-6.0.0-1013-oem, linux-image-oem-22.04b,
    linux-oem-6.0-tools-host, linux-modules-iwlwifi-6.0.0-1013-oem,
    linux-image-6.0.0-1013-oem, linux-oem-6.0, linux-tools-6.0.0-1013-oem,
    linux-modules-ivsc-6.0.0-1013-oem, linux-modules-6.0.0-1013-oem,
    linux-headers-oem-22.04b, linux-buildinfo-6.0.0-1013-oem,
    linux-modules-ipu6-oem-22.04b, linux-oem-6.0-tools-6.0.0-1013,
    linux-headers-6.0.0-1013-oem, linux-modules-iwlwifi-oem-22.04b,
    linux-oem-22.04b, linux-tools-oem-22.04b
  o USN-6024-1 : linux-buildinfo-5.19.0-1021-kvm,
    linux-image-5.19.0-1016-raspi, linux-headers-lowlatency-hwe-20.04-edge,
    linux-image-5.19.0-40-generic, linux-image-oem-22.04,
    linux-tools-lowlatency-64k-hwe-22.04, linux-tools-5.19.0-1016-raspi-nolpae,
    linux-lowlatency-64k-hwe-22.04-edge, linux-aws-cloud-tools-5.19.0-1023,
    linux-tools-generic-64k-hwe-22.04-edge, linux-modules-5.19.0-1016-raspi,
    linux-image-5.19.0-1020-gcp, linux-image-generic-lpae-hwe-22.04,
    linux-tools-5.19.0-1020-oracle, linux-azure,
    linux-tools-lowlatency-hwe-22.04-edge, linux-image-5.19.0-1023-azure,
    linux-image-generic, linux-modules-5.19.0-1022-lowlatency-64k,
    linux-azure-tools-5.19.0-1023, linux-lowlatency, linux-aws,
    linux-tools-raspi, linux-modules-5.19.0-1020-oracle,
    linux-tools-lowlatency-64k-hwe-20.04-edge, linux-tools-virtual-hwe-22.04,
    linux-modules-5.19.0-1023-aws, linux-tools-5.19.0-1020-gcp,
    linux-crashdump, linux-lowlatency-tools-common, linux-raspi,
    linux-cloud-tools-lowlatency-hwe-20.04-edge,
    linux-image-generic-64k-hwe-22.04-edge, linux-image-generic-hwe-22.04-edge,
    linux-tools-5.19.0-40-generic, linux-tools-generic-lpae-hwe-22.04-edge,
    linux-image-lowlatency-hwe-20.04, linux-modules-extra-azure,
    linux-headers-raspi, linux-image-5.19.0-40-generic-64k,
    linux-image-5.19.0-40-generic-lpae, linux-tools-host,
    linux-aws-headers-5.19.0-1023, linux-headers-lowlatency-64k-hwe-22.04,
    linux-tools-lowlatency-64k, linux-image-virtual-hwe-22.04-edge,
    linux-image-kvm, linux-cloud-tools-generic-hwe-22.04,
    linux-headers-generic-lpae-hwe-22.04, linux-tools-generic,
    linux-lowlatency-hwe-20.04-edge, linux-headers-virtual-hwe-22.04-edge,
    linux-lowlatency-tools-5.19.0-1022, linux-doc,
    linux-tools-lowlatency-64k-hwe-22.04-edge,
    linux-tools-lowlatency-hwe-20.04-edge, linux-generic-lpae-hwe-22.04-edge,
    linux-headers-lowlatency-hwe-22.04-edge, linux-tools-generic-64k-hwe-22.04,
    linux-image-raspi-nolpae, linux-headers-generic-hwe-22.04,
    linux-image-lowlatency-hwe-22.04, linux-modules-extra-5.19.0-1020-gcp,
    linux-image-virtual, linux-buildinfo-5.19.0-1022-lowlatency,
    linux-hwe-5.19-cloud-tools-common, linux-modules-extra-raspi,
    linux-headers-lowlatency-64k-hwe-20.04-edge, linux-tools-kvm,
    linux-image-lowlatency-64k, linux-modules-extra-5.19.0-1023-azure,
    linux-modules-ivsc-generic, linux-hwe-5.19,
    linux-image-unsigned-5.19.0-1022-lowlatency-64k,
    linux-headers-lowlatency-64k, linux-image-aws,
    linux-cloud-tools-5.19.0-1022-lowlatency,
    linux-image-unsigned-5.19.0-1020-gcp, linux-tools-5.19.0-1023-azure,
    linux-tools-raspi-nolpae, linux-generic-lpae-hwe-22.04,
    linux-tools-5.19.0-1016-raspi, linux-cloud-tools-virtual-hwe-22.04-edge,
    linux-modules-extra-5.19.0-1016-raspi, linux-tools-5.19.0-1023-aws,
    linux-headers-oem-22.04, linux-lowlatency-64k-hwe-20.04,
    linux-headers-lowlatency-64k-hwe-20.04, linux-hwe-5.19-tools-host,
    linux-modules-extra-aws, linux-kvm-headers-5.19.0-1021,
    linux-modules-5.19.0-1023-azure, linux-generic-hwe-22.04,
    linux-kvm-tools-5.19.0-1021, linux-modules-extra-5.19.0-40-generic,
    linux-modules-extra-raspi-nolpae, linux-tools-5.19.0-1022-lowlatency-64k,
    linux-gcp, linux-image-5.19.0-1016-raspi-nolpae,
    linux-hwe-5.19-tools-common, linux-headers-virtual, linux-source-5.19.0,
    linux-image-extra-virtual-hwe-22.04,
    linux-modules-iwlwifi-5.19.0-40-generic, linux-tools-lowlatency-hwe-20.04,
    linux-headers-5.19.0-1023-aws, linux-tools-aws,
    linux-modules-ivsc-generic-hwe-22.04-edge,
    linux-buildinfo-5.19.0-40-generic-lpae, linux-oracle-tools-5.19.0-1020,
    linux-tools-oracle, linux-modules-extra-5.19.0-1016-raspi-nolpae,
    linux-tools-generic-lpae, linux-headers-lowlatency-hwe-22.04,
    linux-tools-lowlatency-hwe-22.04, linux-image-generic-lpae,
    linux-raspi-nolpae, linux-image-unsigned-5.19.0-1023-aws,
    linux-buildinfo-5.19.0-1020-oracle, linux-modules-ivsc-generic-hwe-22.04,
    linux-headers-5.19.0-1016-raspi,
    linux-buildinfo-5.19.0-1022-lowlatency-64k,
    linux-headers-5.19.0-1023-azure, linux-headers-generic-64k,
    linux-image-lowlatency-64k-hwe-22.04-edge,
    linux-azure-cloud-tools-5.19.0-1023, linux-lowlatency-64k,
    linux-image-unsigned-5.19.0-40-generic,
    linux-headers-5.19.0-40-generic-lpae, linux-tools-lowlatency,
    linux-cloud-tools-5.19.0-1023-aws, linux-image-raspi,
    linux-modules-ipu6-generic, linux-oem-22.04, linux-headers-generic,
    linux-tools-5.19.0-1021-kvm, linux-image-5.19.0-1022-lowlatency,
    linux-lowlatency-cloud-tools-5.19.0-1022, linux-lowlatency-hwe-22.04-edge,
    linux-image-unsigned-5.19.0-1023-azure, linux-image-gcp,
    linux-lowlatency-cloud-tools-common,
    linux-cloud-tools-lowlatency-hwe-22.04-edge,
    linux-modules-ipu6-generic-hwe-22.04-edge, linux-cloud-tools-common,
    linux-lowlatency-headers-5.19.0-1022, linux-tools-generic-hwe-22.04,
    linux-cloud-tools-virtual-hwe-22.04,
    linux-headers-generic-64k-hwe-22.04-edge,
    linux-headers-generic-lpae-hwe-22.04-edge,
    linux-buildinfo-5.19.0-1023-azure, linux-buildinfo-5.19.0-1023-aws,
    linux-cloud-tools-lowlatency-hwe-22.04, linux-generic, linux-generic-lpae,
    linux-cloud-tools-azure, linux-hwe-5.19-tools-5.19.0-40,
    linux-image-generic-64k-hwe-22.04, linux-headers-5.19.0-1022-lowlatency,
    linux-image-lowlatency-64k-hwe-20.04, linux-headers-virtual-hwe-22.04,
    linux-headers-5.19.0-40, linux-hwe-5.19-cloud-tools-5.19.0-40,
    linux-modules-5.19.0-1022-lowlatency,
    linux-modules-extra-5.19.0-1020-oracle, linux-headers-raspi-nolpae,
    linux-modules-extra-5.19.0-1023-aws, linux-modules-5.19.0-40-generic,
    linux-image-5.19.0-1020-oracle, linux-headers-oracle,
    linux-image-5.19.0-1022-lowlatency-64k, linux-tools-5.19.0-40,
    linux-modules-5.19.0-1020-gcp, linux-modules-extra-gcp,
    linux-buildinfo-5.19.0-40-generic-64k, linux-generic-64k-hwe-22.04,
    linux-image-generic-hwe-22.04, linux-gcp-tools-5.19.0-1020,
    linux-tools-virtual, linux-headers-5.19.0-1021-kvm,
    linux-modules-ipu6-generic-hwe-22.04,
    linux-modules-iwlwifi-5.19.0-1022-lowlatency,
    linux-image-lowlatency-64k-hwe-20.04-edge,
    linux-headers-generic-64k-hwe-22.04, linux-buildinfo-5.19.0-1020-gcp,
    linux-buildinfo-5.19.0-1016-raspi, linux-image-lowlatency,
    linux-tools-5.19.0-1022-lowlatency, linux-virtual, linux-tools-gcp,
    linux-headers-5.19.0-1022-lowlatency-64k, linux-headers-lowlatency,
    linux-modules-5.19.0-40-generic-lpae,
    linux-buildinfo-5.19.0-1016-raspi-nolpae,
    linux-headers-5.19.0-1016-raspi-nolpae, linux-generic-64k-hwe-22.04-edge,
    linux-image-5.19.0-1023-aws, linux-headers-5.19.0-40-generic-64k,
    linux-tools-oem-22.04, linux-modules-ipu6-5.19.0-40-generic,
    linux-modules-ivsc-5.19.0-1022-lowlatency,
    linux-image-unsigned-5.19.0-1021-kvm, linux-modules-ivsc-5.19.0-40-generic,
    linux-gcp-headers-5.19.0-1020, linux-headers-5.19.0-1020-oracle,
    linux-lowlatency-hwe-22.04, linux-cloud-tools-virtual,
    linux-cloud-tools-5.19.0-40-generic, linux-image-oracle,
    linux-cloud-tools-5.19.0-40, linux-virtual-hwe-22.04-edge,
    linux-modules-5.19.0-1016-raspi-nolpae,
    linux-cloud-tools-generic-hwe-22.04-edge, linux-oracle, linux-tools-azure,
    linux-buildinfo-5.19.0-40-generic, linux-image-lowlatency-64k-hwe-22.04,
    linux-image-azure, linux-lowlatency-tools-host, linux-cloud-tools-generic,
    linux-image-virtual-hwe-22.04, linux-image-lowlatency-hwe-22.04-edge,
    linux-tools-virtual-hwe-22.04-edge,
    linux-image-generic-lpae-hwe-22.04-edge,
    linux-tools-generic-lpae-hwe-22.04, linux-tools-lowlatency-64k-hwe-20.04,
    linux-image-5.19.0-1021-kvm, linux-azure-headers-5.19.0-1023,
    linux-raspi-tools-5.19.0-1016, linux-modules-ipu6-5.19.0-1022-lowlatency,
    linux-lowlatency-hwe-20.04, linux-headers-5.19.0-40-generic,
    linux-image-extra-virtual, linux-image-unsigned-5.19.0-1020-oracle,
    linux-tools-generic-hwe-22.04-edge, linux-generic-hwe-22.04-edge,
    linux-headers-5.19.0-1020-gcp, linux-modules-5.19.0-40-generic-64k,
    linux-tools-5.19.0-40-generic-lpae, linux-tools-generic-64k, linux,
    linux-generic-64k, linux-image-generic-64k,
    linux-hwe-5.19-headers-5.19.0-40, linux-headers-kvm,
    linux-modules-5.19.0-1021-kvm, linux-image-lowlatency-hwe-20.04-edge,
    linux-virtual-hwe-22.04, linux-headers-generic-lpae,
    linux-aws-tools-5.19.0-1023, linux-image-extra-virtual-hwe-22.04-edge,
    linux-cloud-tools-lowlatency-hwe-20.04, linux-headers-azure,
    linux-modules-iwlwifi-generic, linux-image-unsigned-5.19.0-40-generic-64k,
    linux-oracle-headers-5.19.0-1020, linux-source,
    linux-headers-generic-hwe-22.04-edge, linux-headers-gcp,
    linux-cloud-tools-5.19.0-1023-azure, linux-lowlatency-64k-hwe-20.04-edge,
    linux-tools-5.19.0-40-generic-64k,
    linux-headers-lowlatency-64k-hwe-22.04-edge, linux-tools-common,
    linux-raspi-headers-5.19.0-1016,
    linux-modules-iwlwifi-generic-hwe-22.04-edge,
    linux-lowlatency-64k-hwe-22.04, linux-modules-iwlwifi-generic-hwe-22.04,
    linux-kvm, linux-image-unsigned-5.19.0-1022-lowlatency, linux-libc-dev,
    linux-headers-lowlatency-hwe-20.04, linux-cloud-tools-lowlatency,
    linux-headers-aws

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: https://auscert.org.au/gpg-key/
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=FJn3
-----END PGP SIGNATURE-----