Debian Linux内核安全公告(DSA-5461-1)：含netfilter UAF及AMD Zen微架构漏洞修复

漏洞概述 漏洞编号：CVE-2023-3390, CVE-2023-3610, CVE-2023-20593 漏洞描述： - CVE-2023-3390：netfilter子系统中的use-after-free漏洞，可能导致拒绝服务或权限提升。 - CVE-2023-3610：netfilter子系统中的use-after-free漏洞，可能导致拒绝服务或权限提升。 - CVE-2023-20593：AMD Zen 2+ CPU中的微架构漏洞，可能导致信息泄露。 影响范围 受影响系统：Linux内核 受影响CPU：AMD Zen 2+ CPU 受影响软件包：Linux内核及相关软件包 修复方案 修复版本：Debian 11 (bullseye) 中的版本5.10.179-3 建议措施： - 升级Linux内核及相关软件包至最新版本。 - 对于AMD Zen 2+ CPU，可以通过更新微代码或系统固件（BIOS/UEFI）来缓解漏洞。 - 注意：AMD仅提供第二代EPYC CPU的微代码更新，其他Ryzen CPU暂无更新。 相关链接 Debian安全公告：https://www.debian.org/security/ 安全跟踪器：https://security-tracker.debian.org/tracker/linux 详细信息：https://www.debian.org/security/ 邮件列表 订阅地址：debian-security-announce@lists.debian.org 签名信息 签名者：Salvatore Bonaccorso 签名日期：2023年7月30日 --- 代码块 ```plaintext -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Debian Security Advisory DSA-5461-1 https://www.debian.org/security/ July 30, 2023 Package : linux CVE ID : CVE-2023-3390 CVE-2023-3610 CVE-2023-20593 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2023-3390 A use-after-free flaw in the netfilter subsystem caused by incorrect error path handling may result in denial of service or privilege escalation. CVE-2023-3610 A use-after-free flaw in the netfilter subsystem caused by incorrect refcount handling on the table and chain destroy path may result in denial of service or privilege escalation. CVE-2023-20593 Tavis Ormandy discovered that under specific microarchitectural circumstances, a vector register in AMD "Zen 2+" CPUs may not be written to 0 correctly. This flaw allows an attacker to leak sensitive information across concurrent processes, hyper threads and virtualized guests. For details please refer to and This issue can also be mitigated by a microcode update through the amd64-microcode package or a system firmware (BIOS/UEFI) update. However, the initial microcode release by AMD only provides updates for second generation EPYC CPUs. Various Ryzen CPUs are also affected, but no updates are available yet. For the oldstable distribution (bullseye), these problems have been fixed in version 5.10.179-3. We recommend that you upgrade your Linux packages. For the detailed security status of Linux please refer to its security tracker page at: https://security-tracker.debian.org/tracker/linux Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAaA8Jb8vN9hchUy4bW4b2tQfAeTCC7FfAAAAAAALgk AXNzOW9yY29kZS1rZXk0b2JLZ2VtZ3B1bGRpc05zY2FtZGJhdm9yY29kZS1rZXk0b2JL NzQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2 NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4 ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2NjA4ZTQ2Nj

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Debian Linux内核安全公告(DSA-5461-1)：含netfilter UAF及AMD Zen微架构漏洞修复

目标达成感谢每一位支持者 — 我们达成了 100% 目标！