Lucene search

K
ubuntuUbuntuUSN-6974-2
HistoryAug 23, 2024 - 12:00 a.m.

Linux kernel (Oracle) vulnerabilities

2024-08-2300:00:00
ubuntu.com
10
ubuntu 20.04 lts
linux kernel
oracle
security issues
superh risc architecture
user-mode linux
mmc subsystem
network drivers
gfs2 file system
ipv4 networking
ipv6 networking
cve-2024-26921
cve-2023-52629
cve-2024-26680
cve-2024-26830
cve-2024-39484
cve-2024-39292
cve-2024-36901
cve-2023-52760
unix

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

Releases

  • Ubuntu 20.04 LTS

Packages

  • linux-oracle-5.15 - Linux kernel for Oracle Cloud systems

Details

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • MMC subsystem;
  • Network drivers;
  • GFS2 file system;
  • IPv4 networking;
  • IPv6 networking;
    (CVE-2024-26921, CVE-2023-52629, CVE-2024-26680, CVE-2024-26830,
    CVE-2024-39484, CVE-2024-39292, CVE-2024-36901, CVE-2023-52760)

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High