Linux kernel vulnerabilities

Releases

• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• linux-aws-5.15 - Linux kernel for Amazon Web Services (AWS) systems
• linux-ibm - Linux kernel for IBM cloud systems
• linux-ibm-5.15 - Linux kernel for IBM cloud systems
• linux-raspi - Linux kernel for Raspberry Pi systems

Details

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde
discovered that an untrusted hypervisor could inject malicious #VC
interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw
is known as WeSee. A local attacker in control of the hypervisor could use
this to expose sensitive information or possibly execute arbitrary code in
the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

• TTY drivers;
• SMB network file system;
• Netfilter;
• Bluetooth subsystem;
  (CVE-2024-26886, CVE-2023-52752, CVE-2024-36016, CVE-2024-26952,
  CVE-2024-27017)