USN-6704-1

Description

linux, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia vulnerabilities It was discovered that the NVIDIA Tegra XUSB pad controller driver in the Linux kernel did not properly handle return values in certain error conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-23000) Quentin Minster discovered that the KSMBD implementation in the Linux kernel did not properly handle session setup requests. A remote attacker could possibly use this to cause a denial of service (memory exhaustion). (CVE-2023-32247) Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle element deactivation in certain cases, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1085) Notselwyn discovered that the netfilter subsystem in the Linux kernel did not properly handle verdict parameters in certain cases, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1086) It was discovered that a race condition existed in the SCSI Emulex LightPulse Fibre Channel driver in the Linux kernel when unregistering FCF and re-scanning an HBA FCF table, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-24855)

Affected Systems

• ubuntu•linux

  < 5.15.0-101.111

• ubuntu•linux-azure

  < 5.15.0-1059.67

• ubuntu•linux-azure-5.15

  < 5.15.0-1059.67~20.04.1

• ubuntu•linux-azure-fde

  < 5.15.0-1059.67.1

• ubuntu•linux-azure-fde-5.15

  < 5.15.0-1059.67~20.04.1.1

• ubuntu•linux-gcp

  < 5.15.0-1054.62

• ubuntu•linux-gcp-5.15

  < 5.15.0-1054.62~20.04.1

• ubuntu•linux-gke

  < 5.15.0-1053.58

• ubuntu•linux-gkeop

  < 5.15.0-1039.45

• ubuntu•linux-gkeop-5.15

  < 5.15.0-1039.45~20.04.1

• ubuntu•linux-hwe-5.15

  < 5.15.0-101.111~20.04.1

• ubuntu•linux-ibm

  < 5.15.0-1049.52

• ubuntu•linux-ibm-5.15

  < 5.15.0-1049.52~20.04.1

• ubuntu•linux-kvm

  < 5.15.0-1053.58

• ubuntu•linux-lowlatency

  < 5.15.0-101.111

• ubuntu•linux-lowlatency-hwe-5.15

  < 5.15.0-101.111~20.04.1

• ubuntu•linux-nvidia

  < 5.15.0-1047.47

References (6)

• https://ubuntu.com/security/notices/USN-6704-1
• https://ubuntu.com/security/CVE-2023-23000
• https://ubuntu.com/security/CVE-2023-32247
• https://ubuntu.com/security/CVE-2024-1085
• https://ubuntu.com/security/CVE-2024-1086
• https://ubuntu.com/security/CVE-2024-24855