Lucene search
Copyright (C) 2024 Greenbone AGOPENVAS:136141256231112202469241HistoryJul 30, 2024 - 12:00 a.m.
Ubuntu: Security Advisory (USN-6924-1)
2024-07-3000:00:00
Copyright (C) 2024 Greenbone AG
plugins.openvas.org
28
ubuntu
security
advisory
linux
kernel
update
vulnerability
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.9
Confidence
High
The remote host is missing an update for the
# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.1.12.2024.6924.1");
script_cve_id("CVE-2021-47131", "CVE-2022-48655", "CVE-2024-26583", "CVE-2024-26584", "CVE-2024-26585", "CVE-2024-26907", "CVE-2024-36016");
script_tag(name:"creation_date", value:"2024-07-30 04:08:39 +0000 (Tue, 30 Jul 2024)");
script_version("2024-07-30T05:05:46+0000");
script_tag(name:"last_modification", value:"2024-07-30 05:05:46 +0000 (Tue, 30 Jul 2024)");
script_tag(name:"cvss_base", value:"6.8");
script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:S/C:C/I:C/A:C");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2024-04-29 19:44:18 +0000 (Mon, 29 Apr 2024)");
script_name("Ubuntu: Security Advisory (USN-6924-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2024 Greenbone AG");
script_family("Ubuntu Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/ubuntu_linux", "ssh/login/packages", re:"ssh/login/release=UBUNTU(18\.04\ LTS|20\.04\ LTS)");
script_xref(name:"Advisory-ID", value:"USN-6924-1");
script_xref(name:"URL", value:"https://ubuntu.com/security/notices/USN-6924-1");
script_tag(name:"summary", value:"The remote host is missing an update for the 'linux, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-raspi, linux-xilinx-zynqmp' package(s) announced via the USN-6924-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM SCMI message protocol,
- InfiniBand drivers,
- TTY drivers,
- TLS protocol,
(CVE-2024-26584, CVE-2024-36016, CVE-2024-26585, CVE-2021-47131,
CVE-2024-26907, CVE-2022-48655, CVE-2024-26583)");
script_tag(name:"affected", value:"'linux, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-raspi, linux-xilinx-zynqmp' package(s) on Ubuntu 18.04, Ubuntu 20.04.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-deb.inc");
release = dpkg_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "UBUNTU18.04 LTS") {
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-1076-ibm", ver:"5.4.0-1076.81~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-1133-gcp", ver:"5.4.0-1133.142~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-1134-azure", ver:"5.4.0-1134.141~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-190-generic", ver:"5.4.0-190.210~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-190-lowlatency", ver:"5.4.0-190.210~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-azure", ver:"5.4.0.1134.141~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-gcp", ver:"5.4.0.1133.142~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-hwe-18.04", ver:"5.4.0.190.210~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-ibm", ver:"5.4.0.1076.81~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-lowlatency-hwe-18.04", ver:"5.4.0.190.210~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-oem", ver:"5.4.0.190.210~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-oem-osp1", ver:"5.4.0.190.210~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-snapdragon-hwe-18.04", ver:"5.4.0.190.210~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-virtual-hwe-18.04", ver:"5.4.0.190.210~18.04.1", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "UBUNTU20.04 LTS") {
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-1041-iot", ver:"5.4.0-1041.42", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-1048-xilinx-zynqmp", ver:"5.4.0-1048.52", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-1076-ibm", ver:"5.4.0-1076.81", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-1089-bluefield", ver:"5.4.0-1089.96", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-1096-gkeop", ver:"5.4.0-1096.100", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-1113-raspi", ver:"5.4.0-1113.125", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-1117-kvm", ver:"5.4.0-1117.124", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-1133-gcp", ver:"5.4.0-1133.142", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-1134-azure", ver:"5.4.0-1134.141", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-190-generic", ver:"5.4.0-190.210", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-190-generic-lpae", ver:"5.4.0-190.210", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-5.4.0-190-lowlatency", ver:"5.4.0-190.210", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-azure-lts-20.04", ver:"5.4.0.1134.128", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-bluefield", ver:"5.4.0.1089.85", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-gcp-lts-20.04", ver:"5.4.0.1133.135", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic", ver:"5.4.0.190.188", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-lpae", ver:"5.4.0.190.188", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-gkeop", ver:"5.4.0.1096.94", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-gkeop-5.4", ver:"5.4.0.1096.94", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-ibm-lts-20.04", ver:"5.4.0.1076.105", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-kvm", ver:"5.4.0.1117.113", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-lowlatency", ver:"5.4.0.190.188", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-oem", ver:"5.4.0.190.188", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-oem-osp1", ver:"5.4.0.190.188", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-raspi", ver:"5.4.0.1113.143", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-raspi2", ver:"5.4.0.1113.143", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-virtual", ver:"5.4.0.190.188", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-xilinx-zynqmp", ver:"5.4.0.1048.48", rls:"UBUNTU20.04 LTS"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Related
openvas
openvas
Ubuntu: Security Advisory (USN-6924-2)
2024-07-31 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2024-71f0f16533)
2024-02-28 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2024-d16d94b00d)
2024-02-28 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2024-07-30 00:00:00
Linux kernel vulnerabilities
2024-07-29 00:00:00
Kernel Live Patch Security Notice
2024-08-20 00:00:00
osv
osv
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6924-1)
2024-07-29 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6924-2)
2024-07-30 00:00:00
Amazon Linux 2 : kernel (ALASKERNEL-5.15-2024-043)
2024-05-20 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: kernel-6.7.6-100.fc38
2024-02-28 01:41:53
[SECURITY] Fedora 39 Update: kernel-6.7.6-200.fc39
2024-02-28 01:11:21
debiancve
debiancve
vulnrichment
vulnrichment
CVE-2022-48655 firmware: arm_scmi: Harden accesses to the reset domains
2024-04-28 13:01:00
CVE-2024-36016 tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
2024-05-29 18:46:34
cve
cve
cvelist
cvelist
redhatcve
redhatcve
nvd
nvd
ubuntucve
ubuntucve
cbl_mariner
cbl_mariner
photon
photon
Moderate Photon OS Security Update - PHSA-2024-5.0-0230
2024-03-23 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0232
2024-03-26 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0584
2024-03-27 00:00:00
redhat
redhat
(RHSA-2024:4447) Important: kernel security update
2024-07-10 00:01:59
(RHSA-2024:4533) Important: kernel security update
2024-07-15 04:54:09
(RHSA-2024:1882) Important: kernel-rt security and bug fix update
2024-04-18 00:58:57
redos
redos
ROS-20240813-01
2024-08-13 00:00:00
ROS-20240814-04
2024-08-14 00:00:00
ROS-20240820-09
2024-08-20 00:00:00
almalinux
almalinux
Important: kernel-rt security and bug fix update
2024-07-08 00:00:00
rocky
rocky
kernel security and bug fix update
2024-07-15 12:17:38
kernel-rt security and bug fix update
2024-07-15 12:17:54
kernel security and bug fix update
2024-07-15 12:20:09
oraclelinux
oraclelinux
kernel security and bug fix update
2024-07-02 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-08-22 09:25:46
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.9
Confidence
High
Related for OPENVAS:136141256231112202469241