Lucene search

K
ubuntuUbuntuUSN-6742-1
HistoryApr 19, 2024 - 12:00 a.m.

Linux kernel vulnerabilities

2024-04-1900:00:00
ubuntu.com
24
ubuntu
linux kernel
security flaws
bluetooth
netfilter
jfs file system
aws
azure
gcp
google container engine
intel iot
ibm
oracle
raspberry pi

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.9%

Releases

  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • linux - Linux kernel
  • linux-aws - Linux kernel for Amazon Web Services (AWS) systems
  • linux-aws-5.15 - Linux kernel for Amazon Web Services (AWS) systems
  • linux-azure-5.15 - Linux kernel for Microsoft Azure cloud systems
  • linux-azure-fde - Linux kernel for Microsoft Azure CVM cloud systems
  • linux-azure-fde-5.15 - Linux kernel for Microsoft Azure CVM cloud systems
  • linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
  • linux-gcp-5.15 - Linux kernel for Google Cloud Platform (GCP) systems
  • linux-gke - Linux kernel for Google Container Engine (GKE) systems
  • linux-gkeop - Linux kernel for Google Container Engine (GKE) systems
  • linux-gkeop-5.15 - Linux kernel for Google Container Engine (GKE) systems
  • linux-hwe-5.15 - Linux hardware enablement (HWE) kernel
  • linux-ibm - Linux kernel for IBM cloud systems
  • linux-ibm-5.15 - Linux kernel for IBM cloud systems
  • linux-intel-iotg - Linux kernel for Intel IoT platforms
  • linux-intel-iotg-5.15 - Linux kernel for Intel IoT platforms
  • linux-kvm - Linux kernel for cloud environments
  • linux-lowlatency-hwe-5.15 - Linux low latency kernel
  • linux-oracle - Linux kernel for Oracle Cloud systems
  • linux-oracle-5.15 - Linux kernel for Oracle Cloud systems
  • linux-raspi - Linux kernel for Raspberry Pi systems

Details

Daniele Antonioli discovered that the Secure Simple Pairing and Secure
Connections pairing in the Bluetooth protocol could allow an
unauthenticated user to complete authentication without pairing
credentials. A physically proximate attacker placed between two Bluetooth
devices could use this to subsequently impersonate one of the paired
devices. (CVE-2023-24023)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

  • JFS file system;
  • Netfilter;
    (CVE-2024-26581, CVE-2023-52600, CVE-2023-52603)