Linux kernel (AWS) vulnerabilities

Releases

• Ubuntu 18.04 ESM

Packages

• linux-aws-5.4 - Linux kernel for Amazon Web Services (AWS) systems

Details

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida
discovered that the Linux kernel mitigations for the initial Branch History
Injection vulnerability (CVE-2022-0001) were insufficient for Intel
processors. A local attacker could potentially use this to expose sensitive
information. (CVE-2024-2201)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

• Netfilter;
  (CVE-2024-26925, CVE-2024-26643)