UBUNTU-CVE-2024-26966: Medium severity ubuntu/linux-aws vulnerability

Q: Which deployments are most likely to be exposed?

The affected code is in the Qualcomm APQ8084 multimedia clock controller driver. Systems not using that driver are not implicated by the provided information.

Q: What access would an attacker need?

The CVSS vector indicates local access and low privileges are required. User interaction is not required.

Q: What is the expected security impact?

The supplied CVSS metrics indicate no confidentiality impact, low integrity impact, and high availability impact.

Published May 1, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcomfindfreq() or qcomfindfreqfloor(). Only compile tested.

Affected Software

181 affected componentsFixes available

ubuntu/linux-aws<4.4.0-1144.150

4.4.0-1144.150

ubuntu/linux-azure<4.15.0-1189.204~14.04.1

4.15.0-1189.204~14.04.1

ubuntu/linux-lts-xenial<4.4.0-269.303~14.04.1

4.4.0-269.303~14.04.1

ubuntu/linux<4.4.0-269.303

4.4.0-269.303

ubuntu/linux-aws<4.4.0-1182.197

4.4.0-1182.197

ubuntu/linux-aws-hwe<4.15.0-1181.194~16.04.1

4.15.0-1181.194~16.04.1

ubuntu/linux-azure<4.15.0-1189.204~16.04.1

4.15.0-1189.204~16.04.1

ubuntu/linux-gcp<4.15.0-1174.191~16.04.1

4.15.0-1174.191~16.04.1

ubuntu/linux-hwe<4.15.0-238.250~16.04.1

4.15.0-238.250~16.04.1

ubuntu/linux-kvm<4.4.0-1145.156

4.4.0-1145.156

ubuntu/linux-oracle<4.15.0-1143.154~16.04.1

4.15.0-1143.154~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-fips<4.4.0-1114.121

4.4.0-1114.121

ubuntu/linux-fips*

ubuntu/linux<4.15.0-238.250

4.15.0-238.250

ubuntu/linux-aws<4.15.0-1181.194

4.15.0-1181.194

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1128.138~18.04.1

5.4.0-1128.138~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15<4.15.0-1189.204

4.15.0-1189.204

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1133.140~18.04.1

5.4.0-1133.140~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15<4.15.0-1174.191

4.15.0-1174.191

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1132.141~18.04.1

5.4.0-1132.141~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-189.209~18.04.1

5.4.0-189.209~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1075.80~18.04.1

5.4.0-1075.80~18.04.1

ubuntu/linux-kvm<4.15.0-1164.169

4.15.0-1164.169

ubuntu/linux-oem*

ubuntu/linux-oracle<4.15.0-1143.154

4.15.0-1143.154

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1127.136~18.04.1

5.4.0-1127.136~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1112.124~18.04.1

5.4.0-1112.124~18.04.1

ubuntu/linux-aws-fips<4.15.0-2119.125

4.15.0-2119.125

ubuntu/linux-azure-fips<4.15.0-2098.104

4.15.0-2098.104

ubuntu/linux-fips<4.15.0-1136.147

4.15.0-1136.147

ubuntu/linux-gcp-fips<4.15.0-2082.88

4.15.0-2082.88

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-189.209

5.4.0-189.209

ubuntu/linux-aws<5.4.0-1128.138

5.4.0-1128.138

ubuntu/linux-aws-5.15<5.15.0-1065.71~20.04.1

5.15.0-1065.71~20.04.1

ubuntu/linux-azure<5.4.0-1133.140

5.4.0-1133.140

ubuntu/linux-azure-5.15<5.15.0-1068.77~20.04.1

5.15.0-1068.77~20.04.1

ubuntu/linux-bluefield<5.4.0-1088.95

5.4.0-1088.95

ubuntu/linux-gcp<5.4.0-1132.141

5.4.0-1132.141

ubuntu/linux-gcp-5.15<5.15.0-1065.73~20.04.1

5.15.0-1065.73~20.04.1

ubuntu/linux-gkeop<5.4.0-1095.99

5.4.0-1095.99

ubuntu/linux-gkeop-5.15<5.15.0-1048.55~20.04.1

5.15.0-1048.55~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-116.126~20.04.1

5.15.0-116.126~20.04.1

ubuntu/linux-ibm<5.4.0-1075.80

5.4.0-1075.80

ubuntu/linux-ibm-5.15<5.15.0-1058.61~20.04.1

5.15.0-1058.61~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1060.66~20.04.1

5.15.0-1060.66~20.04.1

ubuntu/linux-iot<5.4.0-1040.41

5.4.0-1040.41

ubuntu/linux-kvm<5.4.0-1116.123

5.4.0-1116.123

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-116.126~20.04.1

5.15.0-116.126~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1027.27~20.04.1

5.15.0-1027.27~20.04.1

ubuntu/linux-oracle<5.4.0-1127.136

5.4.0-1127.136

ubuntu/linux-oracle-5.15<5.15.0-1063.69~20.04.1

5.15.0-1063.69~20.04.1

ubuntu/linux-raspi<5.4.0-1112.124

5.4.0-1112.124

ubuntu/linux-riscv-5.15<5.15.0-1061.65~20.04.1

5.15.0-1061.65~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1047.51

5.4.0-1047.51

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1128.138+fips1

5.4.0-1128.138+fips1

ubuntu/linux-azure-fips<5.4.0-1133.140+fips1

5.4.0-1133.140+fips1

ubuntu/linux-fips<5.4.0-1102.112

5.4.0-1102.112

ubuntu/linux-gcp-fips<5.4.0-1132.141+fips1

5.4.0-1132.141+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-116.126

5.15.0-116.126

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1065.71

5.15.0-1065.71

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1068.77

5.15.0-1068.77

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1068.77.1

5.15.0-1068.77.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1064.72

5.15.0-1064.72

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1062.68

5.15.0-1062.68

ubuntu/linux-gkeop<5.15.0-1048.55

5.15.0-1048.55

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1058.61

5.15.0-1058.61

ubuntu/linux-intel-iotg<5.15.0-1060.66

5.15.0-1060.66

ubuntu/linux-kvm<5.15.0-1062.67

5.15.0-1062.67

ubuntu/linux-lowlatency<5.15.0-116.126

5.15.0-116.126

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1060.61

5.15.0-1060.61

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-tegra<5.15.0-1026.26

5.15.0-1026.26

ubuntu/linux-nvidia-tegra-igx<5.15.0-1015.15

5.15.0-1015.15

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1063.69

5.15.0-1063.69

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1058.61

5.15.0-1058.61

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1035.39

5.15.0-1035.39

ubuntu/linux-bluefield<5.15.0-1047.49

5.15.0-1047.49

ubuntu/linux-intel-iot-realtime<5.15.0-1058.60

5.15.0-1058.60

ubuntu/linux-realtime<5.15.0-1066.74

5.15.0-1066.74

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1065.71+fips1

5.15.0-1065.71+fips1

ubuntu/linux-azure-fips<5.15.0-1068.77+fips1

5.15.0-1068.77+fips1

ubuntu/linux-fips<5.15.0-115.125+fips1

5.15.0-115.125+fips1

ubuntu/linux-gcp-fips<5.15.0-1064.72+fips1

5.15.0-1064.72+fips1

ubuntu/linux<6.8.0-35.35

6.8.0-35.35

ubuntu/linux-aws<6.8.0-1009.9

6.8.0-1009.9

ubuntu/linux-azure<6.8.0-1008.8

6.8.0-1008.8

ubuntu/linux-gcp<6.8.0-1008.9

6.8.0-1008.9

ubuntu/linux-gke<6.8.0-1004.7

6.8.0-1004.7

ubuntu/linux-ibm<6.8.0-1006.6

6.8.0-1006.6

ubuntu/linux-lowlatency<6.8.0-35.35.1

6.8.0-35.35.1

ubuntu/linux-oem-6.8<6.8.0-1006.6

6.8.0-1006.6

ubuntu/linux-oracle<6.8.0-1006.6

6.8.0-1006.6

ubuntu/linux-raspi<6.8.0-1005.5

6.8.0-1005.5

ubuntu/linux-riscv<6.8.0-35.35.1

6.8.0-35.35.1

ubuntu/linux-raspi-realtime<6.8.0-2004.4

6.8.0-2004.4

ubuntu/linux-realtime<6.8.1-1002.2

6.8.1-1002.2

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1144.150
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1189.204~14.04.1
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-269.303~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-269.303
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1182.197
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1181.194~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1189.204~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1174.191~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-238.250~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1145.156
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1143.154~16.04.1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.4.0-1114.121
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-238.250
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1181.194
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1128.138~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1189.204
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1133.140~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1174.191
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1132.141~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-189.209~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1075.80~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1164.169
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1143.154
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1127.136~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1112.124~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2119.125
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2098.104
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1136.147
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2082.88
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-189.209
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1128.138
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.71~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1133.140
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.77~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1088.95
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1132.141
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.73~20.04.1
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1095.99
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.55~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-116.126~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1075.80
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1058.61~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.66~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1040.41
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1116.123
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-116.126~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.27~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1127.136
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1063.69~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1112.124
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1061.65~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1047.51
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1128.138+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1133.140+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1102.112
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1132.141+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-116.126
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.71
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.77
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.77.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1064.72
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.68
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.55
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1058.61
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.66
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.67
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-116.126
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.61
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1026.26
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.15
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1063.69
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1058.61
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.39
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1047.49
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1058.60
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.74
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.71+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.77+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-115.125+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1064.72+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-35.35
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1009.9
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1008.8
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1008.9
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1004.7
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1006.6
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-35.35.1
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1006.6
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1006.6
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1005.5
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 6.8.0-35.35.1
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2004.4
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1002.2
Compensating control
Add an empty terminating element to the frequency table arrays in the Linux kernel clk: qcom: mmcc-apq8084 driver, including at the end of arrays traversed by qcom_find_freq() or qcom_find_freq_floor(), to prevent out-of-bounds access.

Event History

May 1, 2024

CVE Published

via OSV·06:15 AM

Data Sourced

via OSV·06:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are most likely to be exposed?

The affected code is in the Qualcomm APQ8084 multimedia clock controller driver. Systems not using that driver are not implicated by the provided information.

What access would an attacker need?

The CVSS vector indicates local access and low privileges are required. User interaction is not required.

What is the expected security impact?

The supplied CVSS metrics indicate no confidentiality impact, low integrity impact, and high availability impact.

UBUNTU-CVE-2024-26966: Medium severity ubuntu/linux-aws vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are most likely to be exposed?

What access would an attacker need?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are most likely to be exposed?

What access would an attacker need?

What is the expected security impact?