Lucene search

K
ubuntuUbuntuUSN-6924-1
HistoryJul 29, 2024 - 12:00 a.m.

Linux kernel vulnerabilities

2024-07-2900:00:00
ubuntu.com
19
ubuntu 20.04 lts
ubuntu 18.04 esm
linux kernel
microsoft azure cloud
nvidia bluefield
google cloud platform
google container engine
ibm cloud
iot platforms
raspberry pi
xilinx zynqmp
arm scmi message protocol
infiniband drivers
tty drivers
tls protocol
cve-2024-26584
cve-2024-36016
cve-2024-26585
cve-2021-47131
cve-2024-26907
cve-2022-48655
cve-2024-26583
security issues
system compromise

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • linux - Linux kernel
  • linux-azure - Linux kernel for Microsoft Azure Cloud systems
  • linux-azure-5.4 - Linux kernel for Microsoft Azure cloud systems
  • linux-bluefield - Linux kernel for NVIDIA BlueField platforms
  • linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
  • linux-gcp-5.4 - Linux kernel for Google Cloud Platform (GCP) systems
  • linux-gkeop - Linux kernel for Google Container Engine (GKE) systems
  • linux-hwe-5.4 - Linux hardware enablement (HWE) kernel
  • linux-ibm - Linux kernel for IBM cloud systems
  • linux-ibm-5.4 - Linux kernel for IBM cloud systems
  • linux-iot - Linux kernel for IoT platforms
  • linux-kvm - Linux kernel for cloud environments
  • linux-raspi - Linux kernel for Raspberry Pi systems
  • linux-xilinx-zynqmp - Linux kernel for Xilinx ZynqMP processors

Details

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

  • ARM SCMI message protocol;
  • InfiniBand drivers;
  • TTY drivers;
  • TLS protocol;
    (CVE-2024-26584, CVE-2024-36016, CVE-2024-26585, CVE-2021-47131,
    CVE-2024-26907, CVE-2022-48655, CVE-2024-26583)

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low