USN-7179-2

Advisory lineage Upstream: 28 Downstream: 0
Published: 06 Jan 2025, 20:57
Last modified:03 Jun 2026, 13:34

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Jan 2025, 20:57
Published
Vulnerability first disclosed
03 Jun 2026, 13:34
Last Modified
Vulnerability information updated

Description

linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-hwe-5.15, linux-nvidia, linux-oracle, linux-raspi vulnerabilities Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-12351) Andy Nguyen discovered that the Bluetooth A2MP implementation in the Linux kernel did not properly initialize memory in some situations. A physically proximate remote attacker could use this to expose sensitive information (kernel memory). (CVE-2020-12352) Andy Nguyen discovered that the Bluetooth HCI event packet parser in the Linux kernel did not properly handle event advertisements of certain sizes, leading to a heap-based buffer overflow. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-24490) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Media drivers; - Network drivers; - SMB network file system; - Bluetooth subsystem; - Amateur Radio drivers; - Network traffic control; - VMware vSockets driver; (CVE-2024-35963, CVE-2024-38553, CVE-2024-35965, CVE-2024-26822, CVE-2024-35966, CVE-2024-53057, CVE-2024-43904, CVE-2024-50264, CVE-2024-40973, CVE-2024-40910, CVE-2024-35967)

Affected Systems

  • ubuntu•linux-aws

    < 5.15.0-1076.83

  • ubuntu•linux-aws-5.15

    < 5.15.0-1075.82~20.04.1

  • ubuntu•linux-gcp

    < 5.15.0-1074.83

  • ubuntu•linux-gcp-5.15

    < 5.15.0-1074.83~20.04.1

  • ubuntu•linux-hwe-5.15

    < 5.15.0-130.140~20.04.1

  • ubuntu•linux-nvidia

    < 5.15.0-1070.71

  • ubuntu•linux-oracle

    < 5.15.0-1073.79

  • ubuntu•linux-raspi

    < 5.15.0-1070.73

References (15)