Ubuntu update for linux

1) Out-of-bounds read

EUVDB-ID: #VU100621

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50288

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the vid_cap_start_streaming() function in drivers/media/test-drivers/vivid/vivid-vid-cap.c, within the vivid_vid_cap_s_ctrl() function in drivers/media/test-drivers/vivid/vivid-ctrls.c, within the vivid_create_queue() function in drivers/media/test-drivers/vivid/vivid-core.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) NULL pointer dereference

EUVDB-ID: #VU102127

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56568

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the arm_smmu_probe_device() function in drivers/iommu/arm/arm-smmu/arm-smmu.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Use-after-free

EUVDB-ID: #VU100614

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50280

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the check_migrations(), destroy(), cache_create() and cache_ctr() functions in drivers/md/dm-cache-target.c. A local user can escalate privileges on the system.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Use-after-free

EUVDB-ID: #VU102010

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56677

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the setup_arch() function in arch/powerpc/kernel/setup-common.c, within the fadump_cma_init() and fadump_reserve_mem() functions in arch/powerpc/kernel/fadump.c. A local user can escalate privileges on the system.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) NULL pointer dereference

EUVDB-ID: #VU102112

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56620

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ufs_qcom_probe() function in drivers/ufs/host/ufs-qcom.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Use-after-free

EUVDB-ID: #VU101101

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53108

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the parse_amd_vsdb() function in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c. A local user can escalate privileges on the system.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) NULL pointer dereference

EUVDB-ID: #VU101104

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53115

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the vmw_framebuffer_surface_create_handle() function in drivers/gpu/drm/vmwgfx/vmwgfx_kms.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Buffer overflow

EUVDB-ID: #VU100733

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53061

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the exynos4_jpeg_parse_decode_h_tbl(), get_word_be() and s5p_jpeg_parse_hdr() functions in drivers/media/platform/s5p-jpeg/jpeg-core.c. A local user can escalate privileges on the system.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Improper error handling

EUVDB-ID: #VU102208

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53215

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper error handling within the svc_rdma_proc_init() function in net/sunrpc/xprtrdma/svc_rdma.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Resource management error

EUVDB-ID: #VU100644

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50275

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the sve_init_regs() function in arch/arm64/kernel/fpsimd.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Use-after-free

EUVDB-ID: #VU101222

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53133

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the dc_state_create_copy() function in drivers/gpu/drm/amd/display/dc/core/dc_state.c. A local user can escalate privileges on the system.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Out-of-bounds read

EUVDB-ID: #VU100620

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50279

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the can_resize() function in drivers/md/dm-cache-target.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Input validation error

EUVDB-ID: #VU105432

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-21831

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the DECLARE_PCI_FIXUP_SUSPEND() function in arch/x86/pci/fixup.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Use-after-free

EUVDB-ID: #VU104945

Risk: Low

CVSSv4.0: 7.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2025-21756

CWE-ID: CWE-416 - Use After Free

Exploit availability: Yes

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the EXPORT_SYMBOL_GPL() and __vsock_release() functions in net/vmw_vsock/af_vsock.c. A local user can escalate privileges on the system.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

15) Input validation error

EUVDB-ID: #VU102271

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56727

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the otx2_alloc_mcam_entries() and otx2_mcam_entry_init() functions in drivers/net/ethernet/marvell/octeontx2/nic/otx2_flows.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Buffer overflow

EUVDB-ID: #VU100141

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50208

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the bnxt_qplib_alloc_init_hwq() function in drivers/infiniband/hw/bnxt_re/qplib_res.c. A local user can escalate privileges on the system.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Input validation error

EUVDB-ID: #VU100081

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50142

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the verify_newsa_info() function in net/xfrm/xfrm_user.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Buffer overflow

EUVDB-ID: #VU101927

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53148

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the comedi_mmap() function in drivers/comedi/comedi_fops.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Resource management error

EUVDB-ID: #VU102492

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56781

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the fixup_device_tree_chrp(), fixup_device_tree_pmac() and fixup_device_tree() functions in arch/powerpc/kernel/prom_init.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) Use-after-free

EUVDB-ID: #VU102059

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53171

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the get_znodes_to_commit() function in fs/ubifs/tnc_commit.c. A local user can escalate privileges on the system.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) Out-of-bounds read

EUVDB-ID: #VU102076

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56608

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the dcn21_link_encoder_create() function in drivers/gpu/drm/amd/display/dc/resource/dcn21/dcn21_resource.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Use-after-free

EUVDB-ID: #VU102056

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53177

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the SMB2_query_info_free(), invalidate_all_cached_dirs(), smb2_cached_lease_break(), cached_dir_lease_break() and cfids_laundromat_worker() functions in fs/smb/client/cached_dir.c. A local user can escalate privileges on the system.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Buffer overflow

EUVDB-ID: #VU102237

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56708

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the igen6_register_mci() and igen6_unregister_mcis() functions in drivers/edac/igen6_edac.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

24) Improper locking

EUVDB-ID: #VU100128

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50207

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the ring_buffer_subbuf_order_set() function in kernel/trace/ring_buffer.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

25) Out-of-bounds read

EUVDB-ID: #VU100619

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50278

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the get_cache_dev_size() and cache_preresume() functions in drivers/md/dm-cache-target.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

26) Memory leak

EUVDB-ID: #VU100052

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50166

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the mac_probe() and mac_remove() functions in drivers/net/ethernet/freescale/fman/mac.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

27) NULL pointer dereference

EUVDB-ID: #VU102114

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56629

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the wacom_update_name() function in drivers/hid/wacom_sys.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

28) Resource management error

EUVDB-ID: #VU102225

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56723

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the ARRAY_SIZE() and bxtwc_probe() functions in drivers/mfd/intel_soc_pmic_bxtwc.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

29) Memory leak

EUVDB-ID: #VU100057

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50172

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the bnxt_re_setup_chip_ctx() function in drivers/infiniband/hw/bnxt_re/main.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

30) Input validation error

EUVDB-ID: #VU102275

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56707

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the otx2_dmacflt_do_add() and otx2_dmacflt_update() functions in drivers/net/ethernet/marvell/octeontx2/nic/otx2_dmac_flt.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

31) Use-after-free

EUVDB-ID: #VU102917

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50051

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the mpc52xx_spi_remove() function in drivers/spi/spi-mpc52xx.c. A local user can escalate privileges on the system.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

32) Use-after-free

EUVDB-ID: #VU102021

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56606

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the packet_create() function in net/packet/af_packet.c. A local user can escalate privileges on the system.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

33) NULL pointer dereference

EUVDB-ID: #VU102102

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56700

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the fmc_send_cmd() function in drivers/media/radio/wl128x/fmdrv_common.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

34) NULL pointer dereference

EUVDB-ID: #VU102108

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56599

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ath10k_sdio_remove() function in drivers/net/wireless/ath/ath10k/sdio.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

35) NULL pointer dereference

EUVDB-ID: #VU100710

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53051

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the intel_hdcp_read_valid_bksv() function in drivers/gpu/drm/i915/display/intel_hdcp.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

36) Memory leak

EUVDB-ID: #VU101993

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56632

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the nvme_stop_keep_alive() function in drivers/nvme/host/tcp.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*

https://ubuntu.com/security/notices/USN-7449-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

37) Improper locking

EUVDB-ID: #VU102949

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-47143

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the check_unmap() function in kernel/dma/debug.c. A local user can perform a denial of service (DoS) attack.

Update the affected package linux to the latest version.

Ubuntu: 22.04 - 24.04

linux-image-nvidia-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-hwe-22.04 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-64k-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-nvidia-6.8 (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-lowlatency-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-virtual (Ubuntu package): before 6.8.0-58.60

linux-image-oracle-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k-lts-24.04 (Ubuntu package): before 6.8.0-1024.25

linux-image-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1026.26

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1026.26

linux-image-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1026.29

linux-image-nvidia (Ubuntu package): before 6.8.0-1026.29

linux-image-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1

linux-image-lowlatency (Ubuntu package): before 6.8.0-58.60.1

linux-image-kvm (Ubuntu package): before 6.8.0-58.60

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1024.24

linux-image-ibm (Ubuntu package): before 6.8.0-1024.24

linux-image-generic-lpae (Ubuntu package): before 6.8.0-58.60

linux-image-generic-64k (Ubuntu package): before 6.8.0-58.60

linux-image-generic (Ubuntu package): before 6.8.0-58.60

linux-image-azure-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-azure-fde-lts-24.04 (Ubuntu package): before 6.8.0-1027.32

linux-image-aws-lts-24.04 (Ubuntu package): before 6.8.0-1027.29

linux-image-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-58-lowlatency-64k (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-lowlatency (Ubuntu package): before 6.8.0-58.60.1~22.04.1

linux-image-6.8.0-58-generic-64k (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-58-generic (Ubuntu package): before 6.8.0-58.60+1

linux-image-6.8.0-1027-azure-fde (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-azure (Ubuntu package): before 6.8.0-1027.32~22.04.1

linux-image-6.8.0-1027-aws (Ubuntu package): before 6.8.0-1027.29

linux-image-6.8.0-1026-oem (Ubuntu package): before 6.8.0-1026.26

linux-image-6.8.0-1026-nvidia-lowlatency-64k (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-lowlatency (Ubuntu package): before 6.8.0-1026.29.1

linux-image-6.8.0-1026-nvidia-64k (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1026-nvidia (Ubuntu package): before 6.8.0-1026.29~22.04.1

linux-image-6.8.0-1024-oracle-64k (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-oracle (Ubuntu package): before 6.8.0-1024.25~22.04.1

linux-image-6.8.0-1024-ibm (Ubuntu package): before 6.8.0-1024.24

• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-6.8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k-hwe-22.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-virtual_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04a_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-oem-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-kvm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-lts-24.04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm-classic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-lpae_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-azure-fde-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws-lts-24_04_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-58-generic_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure-fde_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-azure_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1027-aws_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-oem_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-lowlatency_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1026-nvidia_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle-64k_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-oracle_ubuntu_package:*:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:linux-image-6_8_0-1024-ibm_ubuntu_package:*:*:*:*:*:ubuntu:*:*