Linux kernel vulnerabilities

Releases

• Ubuntu 24.04 LTS

Packages

• linux - Linux kernel
• linux-aws - Linux kernel for Amazon Web Services (AWS) systems
• linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
• linux-gke - Linux kernel for Google Container Engine (GKE) systems
• linux-ibm - Linux kernel for IBM cloud systems
• linux-nvidia - Linux kernel for NVIDIA systems
• linux-oem-6.8 - Linux kernel for OEM systems
• linux-raspi - Linux kernel for Raspberry Pi systems

Details

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde
discovered that an untrusted hypervisor could inject malicious #VC
interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw
is known as WeSee. A local attacker in control of the hypervisor could use
this to expose sensitive information or possibly execute arbitrary code in
the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

• DMA engine subsystem;
• HID subsystem;
• I2C subsystem;
• PHY drivers;
• TTY drivers;
• IPv4 networking;
  (CVE-2024-35990, CVE-2024-35997, CVE-2024-35992, CVE-2024-35984,
  CVE-2024-36008, CVE-2024-36016)