Linux kernel vulnerabilities

Releases

• Ubuntu 24.04 LTS

Packages

• linux-lowlatency - Linux low latency kernel

Details

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde
discovered that an untrusted hypervisor could inject malicious #VC
interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw
is known as WeSee. A local attacker in control of the hypervisor could use
this to expose sensitive information or possibly execute arbitrary code in
the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

• DMA engine subsystem;
• HID subsystem;
• I2C subsystem;
• PHY drivers;
• TTY drivers;
• IPv4 networking;
  (CVE-2024-35997, CVE-2024-36016, CVE-2024-35990, CVE-2024-35984,
  CVE-2024-35992, CVE-2024-36008)