linux-aws, linux-aws-5.4 vulnerabilities

2024-07-3012:04:43

Google

osv.dev

linux kernel

aws

security update

vulnerabilities

cve-2022-48655

cve-2024-36016

cve-2024-26584

cve-2021-47131

cve-2024-26907

cve-2024-26585

cve-2024-26583

infiniband drivers

tty drivers

tls protocol

arm scmi message protocol

update

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

JSON

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

ARM SCMI message protocol;
InfiniBand drivers;
TTY drivers;
TLS protocol;
(CVE-2022-48655, CVE-2024-36016, CVE-2024-26584, CVE-2021-47131,
CVE-2024-26907, CVE-2024-26585, CVE-2024-26583)