InfoSecBulletin Cybersecurity for mankind
Ubuntu 22.04 LTS users are advised to update their systems right away due to a crucial security patch from Canonical that fixes critical vulnerabilities in the Linux kernel for Xilinx ZynqMP processors.
The Linux kernel for Xilinx Zynq UltraScale+ MPSoC is customized to support the features and hardware of these processors.
Axentec Launches Bangladesh’s First Locally Hosted Tier-4 Cloud Platform
Hackers Bypass Gmail MFA With App-Specific Password Reuse
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems
Paraguay 7.4 Million Citizen Records Leaked on Dark Web
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation
These processors feature a quad-core ARM Cortex-A53 (64-bit) application processor, a dual-core ARM Cortex-R5 (32-bit) real-time processor, an ARM Mali-400 GPU, and programmable logic (FPGA).
The Linux kernel is a strong foundation for embedded and general-purpose applications on devices. If unpatched, these flaws could let attackers gain unauthorized access or disrupt systems.
“Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system”.
The patch fixes hundreds of CVEs across various subsystems, architectures, drivers, and protocols. A full list of fixed CVEs can be found in the official security notice.
The new Linux kernel update brings important security fixes and performance enhancements across several subsystems:
Architectures: Updates for ARM32, x86, RISC-V, and S390.
File Systems: Enhanced security and performance for BTRFS, Ext4, GFS2, Ceph, NFS, JFS, and F2FS.
Drivers: Fixes for GPU, USB, Bluetooth, GPIO, Ethernet bonding, and InfiniBand drivers.
Networking: Improvements to TCP, SCTP, IPv4, IPv6, Netfilter, and more.
Security Frameworks: Updates for SELinux and access control modules.
Core Components: Optimizations for memory management and tracing infrastructure.
Ubuntu has released security updates for vulnerabilities in other systems, along with subsystem updates.
