Lucene search

K
ubuntuUbuntuUSN-6974-1
HistoryAug 21, 2024 - 12:00 a.m.

Linux kernel vulnerabilities

2024-08-2100:00:00
ubuntu.com
36
linux kernel
ubuntu 22.04 lts
ubuntu 20.04 lts
cloud systems
security vulnerabilities
superh risc architecture
user-mode linux
mmc subsystem
network drivers
gfs2 file system
ipv4 networking
ipv6 networking

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

Releases

  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • linux - Linux kernel
  • linux-aws - Linux kernel for Amazon Web Services (AWS) systems
  • linux-aws-5.15 - Linux kernel for Amazon Web Services (AWS) systems
  • linux-azure - Linux kernel for Microsoft Azure Cloud systems
  • linux-azure-5.15 - Linux kernel for Microsoft Azure cloud systems
  • linux-azure-fde - Linux kernel for Microsoft Azure CVM cloud systems
  • linux-azure-fde-5.15 - Linux kernel for Microsoft Azure CVM cloud systems
  • linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
  • linux-gcp-5.15 - Linux kernel for Google Cloud Platform (GCP) systems
  • linux-gke - Linux kernel for Google Container Engine (GKE) systems
  • linux-gkeop - Linux kernel for Google Container Engine (GKE) systems
  • linux-gkeop-5.15 - Linux kernel for Google Container Engine (GKE) systems
  • linux-hwe-5.15 - Linux hardware enablement (HWE) kernel
  • linux-ibm - Linux kernel for IBM cloud systems
  • linux-ibm-5.15 - Linux kernel for IBM cloud systems
  • linux-intel-iotg - Linux kernel for Intel IoT platforms
  • linux-intel-iotg-5.15 - Linux kernel for Intel IoT platforms
  • linux-kvm - Linux kernel for cloud environments
  • linux-lowlatency - Linux low latency kernel
  • linux-lowlatency-hwe-5.15 - Linux low latency kernel
  • linux-nvidia - Linux kernel for NVIDIA systems
  • linux-oracle - Linux kernel for Oracle Cloud systems
  • linux-raspi - Linux kernel for Raspberry Pi systems

Details

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • MMC subsystem;
  • Network drivers;
  • GFS2 file system;
  • IPv4 networking;
  • IPv6 networking;
    (CVE-2024-26921, CVE-2023-52629, CVE-2024-26680, CVE-2024-26830,
    CVE-2024-39484, CVE-2024-39292, CVE-2024-36901, CVE-2023-52760)

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low