Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6828-1
HistoryJun 11, 2024 - 12:00 a.m.

Linux kernel (Intel IoTG) vulnerabilities

2024-06-1100:00:00
ubuntu.com
6
linux kernel
intel iotg
ubuntu 20.04 lts
broadcom fullmac wlan driver
ata over ethernet driver
atheros 802.11ac wireless driver
hugetlb file system
open vswitch implementation
branch history injection vulnerability
bluetooth rfcomm protocol driver
rds protocol implementation
security issues
arm32 architecture
powerpc architecture
risc-v architecture
s390 architecture
core kernel
x86 architecture
block layer subsystem
acpi drivers
android drivers
power management core
bus devices
hardware random number generator core
clock framework and drivers
cpu frequency scaling framework
cryptographic api
device frequency scaling framework
dma engine subsystem
arm scmi message protocol
efi core
gpu drivers
hid subsystem
hardware monitoring drivers
i2c subsystem
iio adc drivers
iio subsystem
iio magnetometer sensors drivers
infiniband drivers
iommu subsystem
multiple devices driver
media drivers
mmc subsystem
network drivers
ntb driver
nvme drivers
pci subsystem
pci driver for microsemi switchtec
phy drivers
mediatek pm domains
power supply drivers
scsi drivers
spi subsystem
media staging drivers
tcm subsystem
usb subsystem
designware usb3 driver
framebuffer layer
afs file system
file systems infrastructure
btrfs file system
ceph distributed file system
erofs file system
ext4 file system
f2fs file system
jfs file system
network file system client
nilfs2 file system
ntfs3 file system
pstore file system
diskquota system
smb network file system
bpf subsystem
memory management
netfilter
tls protocol

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

18.7%

JSON

Releases

  • Ubuntu 20.04 LTS

Packages

  • linux-intel-iotg-5.15 - Linux kernel for Intel IoT platforms

Details

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux
kernel contained a race condition, leading to a use-after-free
vulnerability. An attacker could use this to cause a denial of service or
possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not
properly validate certain data structures, leading to a NULL pointer
dereference. An attacker could possibly use this to cause a denial of
service. (CVE-2023-7042)

It was discovered that the HugeTLB file system component of the Linux
Kernel contained a NULL pointer dereference vulnerability. A privileged
attacker could possibly use this to to cause a denial of service.
(CVE-2024-0841)

It was discovered that the Open vSwitch implementation in the Linux kernel
could overflow its stack during recursive action operations under certain
conditions. A local attacker could use this to cause a denial of service
(system crash). (CVE-2024-1151)

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida
discovered that the Linux kernel mitigations for the initial Branch History
Injection vulnerability (CVE-2022-0001) were insufficient for Intel
processors. A local attacker could potentially use this to expose sensitive
information. (CVE-2024-2201)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux
Kernel contained a race condition, leading to a NULL pointer dereference.
An attacker could possibly use this to cause a denial of service (system
crash). (CVE-2024-22099)

Chenyuan Yang discovered that the RDS Protocol implementation in the Linux
kernel contained an out-of-bounds read vulnerability. An attacker could use
this to possibly cause a denial of service (system crash). (CVE-2024-23849)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Core kernel;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Android drivers;
  • Power management core;
  • Bus devices;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • PCI driver for MicroSemi Switchtec;
  • PHY drivers;
  • MediaTek PM domains;
  • Power supply drivers;
  • SCSI drivers;
  • SPI subsystem;
  • Media staging drivers;
  • TCM subsystem;
  • USB subsystem;
  • DesignWare USB3 driver;
  • Framebuffer layer;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • Network file system client;
  • NILFS2 file system;
  • NTFS3 file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • BPF subsystem;
  • Memory management;
  • Netfilter;
  • TLS protocol;
  • io_uring subsystem;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • L2TP protocol;
  • Logical Link layer;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netlink;
  • NET/ROM layer;
  • NFC subsystem;
  • Packet sockets;
  • RDS protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • Unix domain sockets;
  • Wireless networking;
  • Tomoyo security module;
  • Realtek audio codecs;
  • USB sound devices;
    (CVE-2024-26910, CVE-2024-27074, CVE-2023-52494, CVE-2023-52594,
    CVE-2024-26915, CVE-2024-26766, CVE-2023-52489, CVE-2024-35845,
    CVE-2024-26846, CVE-2024-26898, CVE-2024-26897, CVE-2024-26826,
    CVE-2024-26798, CVE-2023-52662, CVE-2024-26856, CVE-2023-52608,
    CVE-2024-26782, CVE-2024-27047, CVE-2024-27390, CVE-2024-26610,
    CVE-2024-26804, CVE-2023-52638, CVE-2024-26771, CVE-2024-26752,
    CVE-2024-26585, CVE-2024-26645, CVE-2024-26715, CVE-2024-27028,
    CVE-2024-26809, CVE-2024-26880, CVE-2024-27432, CVE-2024-27065,
    CVE-2024-26717, CVE-2023-52616, CVE-2024-26748, CVE-2024-26795,
    CVE-2024-26671, CVE-2024-26743, CVE-2024-27412, CVE-2024-26802,
    CVE-2024-26733, CVE-2024-26736, CVE-2023-52618, CVE-2024-27046,
    CVE-2024-26688, CVE-2024-26679, CVE-2024-26769, CVE-2024-27051,
    CVE-2024-26603, CVE-2024-26744, CVE-2023-52434, CVE-2024-26697,
    CVE-2024-27075, CVE-2023-52583, CVE-2024-26583, CVE-2024-27403,
    CVE-2024-26907, CVE-2024-26636, CVE-2024-27410, CVE-2023-52530,
    CVE-2024-26840, CVE-2024-26851, CVE-2024-26862, CVE-2023-52640,
    CVE-2024-35829, CVE-2024-26906, CVE-2024-26777, CVE-2024-27419,
    CVE-2024-26664, CVE-2024-26627, CVE-2024-26859, CVE-2023-52486,
    CVE-2023-52652, CVE-2024-26835, CVE-2024-35844, CVE-2024-26702,
    CVE-2024-26635, CVE-2024-26704, CVE-2023-52633, CVE-2024-26816,
    CVE-2024-26894, CVE-2024-26778, CVE-2023-52599, CVE-2024-35828,
    CVE-2024-26776, CVE-2023-52493, CVE-2024-26845, CVE-2024-26594,
    CVE-2024-26885, CVE-2024-26829, CVE-2023-52645, CVE-2024-26695,
    CVE-2023-52615, CVE-2024-26651, CVE-2024-26843, CVE-2023-52606,
    CVE-2024-26675, CVE-2024-26874, CVE-2024-26883, CVE-2024-26772,
    CVE-2024-26673, CVE-2024-26737, CVE-2023-52631, CVE-2024-26640,
    CVE-2023-52598, CVE-2024-26735, CVE-2024-26895, CVE-2024-26592,
    CVE-2023-52492, CVE-2024-26861, CVE-2023-52644, CVE-2024-26920,
    CVE-2024-26877, CVE-2024-26863, CVE-2024-26720, CVE-2024-26722,
    CVE-2024-27045, CVE-2024-27038, CVE-2024-26763, CVE-2024-26833,
    CVE-2024-27417, CVE-2024-26916, CVE-2024-26857, CVE-2024-26875,
    CVE-2024-26606, CVE-2024-27024, CVE-2024-26615, CVE-2023-52614,
    CVE-2023-52641, CVE-2024-26600, CVE-2024-27043, CVE-2023-52635,
    CVE-2024-26787, CVE-2024-26622, CVE-2024-27413, CVE-2024-26791,
    CVE-2023-52622, CVE-2023-52491, CVE-2023-52604, CVE-2024-27037,
    CVE-2024-26881, CVE-2024-26754, CVE-2024-26659, CVE-2024-26663,
    CVE-2024-26747, CVE-2023-52602, CVE-2024-26712, CVE-2024-26839,
    CVE-2024-26749, CVE-2024-26764, CVE-2024-26820, CVE-2024-26882,
    CVE-2024-27039, CVE-2024-27078, CVE-2024-26889, CVE-2024-26870,
    CVE-2024-26788, CVE-2024-26602, CVE-2024-26903, CVE-2024-27044,
    CVE-2024-27073, CVE-2023-52601, CVE-2023-52595, CVE-2024-26707,
    CVE-2024-27415, CVE-2023-52637, CVE-2024-26660, CVE-2024-27414,
    CVE-2024-27054, CVE-2023-52497, CVE-2024-26801, CVE-2023-52435,
    CVE-2023-52620, CVE-2023-52627, CVE-2024-26698, CVE-2023-52597,
    CVE-2024-27077, CVE-2023-52650, CVE-2024-26750, CVE-2024-26852,
    CVE-2024-27053, CVE-2023-52656, CVE-2024-26625, CVE-2024-26779,
    CVE-2024-27431, CVE-2024-26751, CVE-2024-26684, CVE-2024-26803,
    CVE-2024-26593, CVE-2023-52642, CVE-2023-52447, CVE-2024-26790,
    CVE-2024-26825, CVE-2024-26668, CVE-2023-52607, CVE-2024-26872,
    CVE-2024-27030, CVE-2023-52643, CVE-2024-26901, CVE-2024-35830,
    CVE-2024-26855, CVE-2023-52588, CVE-2023-52587, CVE-2024-26891,
    CVE-2024-26644, CVE-2024-26884, CVE-2024-26793, CVE-2024-26805,
    CVE-2024-26584, CVE-2024-27405, CVE-2023-52623, CVE-2024-26608,
    CVE-2024-26878, CVE-2024-27388, CVE-2024-27416, CVE-2024-26685,
    CVE-2024-27034, CVE-2024-26879, CVE-2024-26614, CVE-2024-26792,
    CVE-2023-52617, CVE-2024-26773, CVE-2024-26665, CVE-2024-26641,
    CVE-2023-52619, CVE-2024-35811, CVE-2024-27052, CVE-2024-27076,
    CVE-2024-26838, CVE-2024-26808, CVE-2024-26696, CVE-2024-26676,
    CVE-2024-26689, CVE-2024-26774, CVE-2024-26601, CVE-2023-52498,
    CVE-2024-27436)
OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchlinux-image-5.15.0-1058-intel-iotg< 5.15.0-1058.64~20.04.1UNKNOWN
Ubuntu20.04noarchlinux-image-5.15.0-1058-intel-iotg-dbgsym< 5.15.0-1058.64~20.04.1UNKNOWN
Ubuntu20.04noarchlinux-image-intel< 5.15.0.1058.64~20.04.1UNKNOWN
Ubuntu20.04noarchlinux-cloud-tools-intel< 5.15.0.1058.64~20.04.1UNKNOWN
Ubuntu20.04noarchlinux-headers-intel< 5.15.0.1058.64~20.04.1UNKNOWN
Ubuntu20.04noarchlinux-headers-intel-iotg< 5.15.0.1058.64~20.04.1UNKNOWN
Ubuntu20.04noarchlinux-headers-intel-iotg-edge< 5.15.0.1058.64~20.04.1UNKNOWN
Ubuntu20.04noarchlinux-image-intel-iotg< 5.15.0.1058.64~20.04.1UNKNOWN
Ubuntu20.04noarchlinux-image-intel-iotg-edge< 5.15.0.1058.64~20.04.1UNKNOWN
Ubuntu20.04noarchlinux-intel< 5.15.0.1058.64~20.04.1UNKNOWN
Rows per page:
1-10 of 151

References

Related

ubuntu 33
openvas 50
osv 38
nessus 68
slackware 1
debian 2
amazon 1
redos 3
photon 1
fedora 2
ubuntu
ubuntu
Linux kernel vulnerabilities
2024-05-07 00:00:00
Linux kernel vulnerabilities
2024-06-07 00:00:00
Linux kernel vulnerabilities
2024-06-10 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6821-1)
2024-06-10 00:00:00
Ubuntu: Security Advisory (USN-6871-1)
2024-07-04 00:00:00
Ubuntu: Security Advisory (USN-6766-1)
2024-05-08 00:00:00
osv
osv
linux, linux-gcp, linux-gcp-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-xilinx-zynqmp vulnerabilities
2024-06-07 22:40:36
linux-ibm-5.15 vulnerabilities
2024-07-10 21:06:59
linux-aws, linux-aws-5.15 vulnerabilities
2024-05-20 13:05:13
nessus
nessus
Ubuntu 20.04 LTS : Linux kernel (IBM) vulnerabilities (USN-6892-1)
2024-07-11 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (AWS) vulnerabilities (USN-6766-3)
2024-05-20 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6766-1)
2024-05-07 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2024-06-05 19:11:11
debian
debian
[SECURITY] [DSA 5681-1] linux security update
2024-05-06 18:31:39
[SECURITY] [DSA 5658-1] linux security update
2024-04-13 06:38:27
amazon
amazon
Medium: kernel
2024-05-23 22:04:00
redos
redos
ROS-20240821-02
2024-08-21 00:00:00
ROS-20240909-03
2024-09-09 00:00:00
ROS-20240820-09
2024-08-20 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0738
2024-03-19 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: kernel-6.7.6-100.fc38
2024-02-28 01:41:53
[SECURITY] Fedora 39 Update: kernel-6.7.6-200.fc39
2024-02-28 01:11:21

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

18.7%

JSON
Related for USN-6828-1
ubuntu33openvas50osv38nessus68slackware1debian2amazon1redos3photon1fedora2