Lucene search

K
ubuntuUbuntuUSN-6924-2
HistoryJul 30, 2024 - 12:00 a.m.

Linux kernel vulnerabilities

2024-07-3000:00:00
ubuntu.com
17
ubuntu 20.04 lts
ubuntu 18.04 esm
linux kernel
amazon web services (aws)
arm scmi
infiniband
tty drivers
tls protocol
cve-2022-48655
cve-2024-36016
cve-2024-26584
cve-2021-47131
cve-2024-26907
cve-2024-26585
cve-2024-26583

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8

Confidence

High

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • linux-aws - Linux kernel for Amazon Web Services (AWS) systems
  • linux-aws-5.4 - Linux kernel for Amazon Web Services (AWS) systems

Details

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

  • ARM SCMI message protocol;
  • InfiniBand drivers;
  • TTY drivers;
  • TLS protocol;
    (CVE-2022-48655, CVE-2024-36016, CVE-2024-26584, CVE-2021-47131,
    CVE-2024-26907, CVE-2024-26585, CVE-2024-26583)

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8

Confidence

High