UBUNTU-CVE-2024-46743: High severity ubuntu/linux-aws vulnerability

Q: Which Ubuntu kernel package variants are listed as affected?

The listed software includes ubuntu/linux, ubuntu/linux-aws, ubuntu/linux-azure, ubuntu/linux-gcp, ubuntu/linux-fips, ubuntu/linux-aws-fips, ubuntu/linux-azure-fips, and ubuntu/linux-gcp-fips. No affected or fixed version ranges are provided.

Q: What level of access does an attacker need?

The vector is local with low attack complexity and low privileges required. No user interaction is required.

Q: What is the potential security impact?

The supplied severity vector indicates high confidentiality and availability impact, with no integrity impact. The reported failure is an out-of-bounds read in the kernel interrupt-map parsing path.

Q: What configuration condition is associated with the issue?

The issue occurs when of_irq_parse_raw() is invoked with a device address that is smaller than the interrupt parent node's #address-cells property. The data does not state whether this condition exists in default Ubuntu configurations.

Published Sep 18, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk When ofirqparseraw() is invoked with a device address smaller than the interrupt parent node (from #address-cells property), KASAN detects the following out-of-bounds read when populating the initial match table (dyndbg="func ofirqparse +p"): OF: ofirqparseone: dev=/soc@0/picasso/watchdog, index=0 OF: parent=/soc@0/pci@878000000000/gpio0@17,0, intsize=2 OF: intspec=4 OF: ofirqparseraw: ipar=/soc@0/pci@878000000000/gpio0@17,0, size=2 OF: -> addrsize=3 ================================================================== BUG: KASAN: slab-out-of-bounds in ofirqparseraw+0x2b8/0x8d0 Read of size 4 at addr ffffff81beca5608 by task bash/764 CPU: 1 PID: 764 Comm: bash Tainted: G O 6.1.67-484c613561-nokiasmarm64 #1 Hardware name: Unknown Unknown Product/Unknown Product, BIOS 2023.01-12.24.03-dirty 01/01/2023 Call trace: dumpbacktrace+0xdc/0x130 showstack+0x1c/0x30 dumpstacklvl+0x6c/0x84 printreport+0x150/0x448 kasanreport+0x98/0x140 asanload4+0x78/0xa0 ofirqparseraw+0x2b8/0x8d0 ofirqparseone+0x24c/0x270 parseinterrupts+0xc0/0x120 offwnodeaddlinks+0x100/0x2d0 fwdevlinkparsefwtree+0x64/0xc0 deviceadd+0xb38/0xc30 ofdeviceadd+0x64/0x90 ofplatformdevicecreatepdata+0xd0/0x170 ofplatformbuscreate+0x244/0x600 ofplatformnotify+0x1b0/0x254 blockingnotifiercallchain+0x9c/0xd0 ofchangesetentrynotify+0x1b8/0x230 ofchangesetapplynotify+0x54/0xe4 ofoverlayfdtapply+0xc04/0xd94 ... The buggy address belongs to the object at ffffff81beca5600 which belongs to the cache kmalloc-128 of size 128 The buggy address is located 8 bytes inside of 128-byte region [ffffff81beca5600, ffffff81beca5680) The buggy address belongs to the physical page: page:00000000230d3d03 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1beca4 head:00000000230d3d03 order:1 compoundmapcount:0 compoundpincount:0 flags: 0x8000000000010200(slab|head|zone=2) raw: 8000000000010200 0000000000000000 dead000000000122 ffffff810000c300 raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffffff81beca5500: 04 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffffff81beca5580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffffff81beca5600: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ^ ffffff81beca5680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffffff81beca5700: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc ================================================================== OF: -> got it ! Prevent the out-of-bounds read by copying the device address into a buffer of sufficient size.

Affected Software

196 affected componentsFixes available

ubuntu/linux-aws<4.4.0-1138.144

4.4.0-1138.144

ubuntu/linux-azure<4.15.0-1183.198~14.04.1

4.15.0-1183.198~14.04.1

ubuntu/linux-lts-xenial<4.4.0-261.295~14.04.1

4.4.0-261.295~14.04.1

ubuntu/linux*

ubuntu/linux<4.4.0-261.295

4.4.0-261.295

ubuntu/linux-aws<4.4.0-1176.191

4.4.0-1176.191

ubuntu/linux-aws-hwe<4.15.0-1175.188~16.04.1

4.15.0-1175.188~16.04.1

ubuntu/linux-azure<4.15.0-1183.198~16.04.1

4.15.0-1183.198~16.04.1

ubuntu/linux-gcp<4.15.0-1168.185~16.04.1

4.15.0-1168.185~16.04.1

ubuntu/linux-hwe<4.15.0-231.243~16.04.1

4.15.0-231.243~16.04.1

ubuntu/linux-kvm<4.4.0-1139.149

4.4.0-1139.149

ubuntu/linux-oracle<4.15.0-1137.148~16.04.1

4.15.0-1137.148~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-fips<4.4.0-1107.114

4.4.0-1107.114

ubuntu/linux-fips*

ubuntu/linux<4.15.0-231.243

4.15.0-231.243

ubuntu/linux-aws<4.15.0-1175.188

4.15.0-1175.188

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1135.145~18.04.1

5.4.0-1135.145~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15<4.15.0-1183.198

4.15.0-1183.198

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1140.147~18.04.1

5.4.0-1140.147~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15<4.15.0-1168.185

4.15.0-1168.185

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1139.148~18.04.1

5.4.0-1139.148~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-200.220~18.04.1

5.4.0-200.220~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1082.87~18.04.1

5.4.0-1082.87~18.04.1

ubuntu/linux-kvm<4.15.0-1158.163

4.15.0-1158.163

ubuntu/linux-oem*

ubuntu/linux-oracle<4.15.0-1137.148

4.15.0-1137.148

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1134.143~18.04.1

5.4.0-1134.143~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1119.131~18.04.1

5.4.0-1119.131~18.04.1

ubuntu/linux-aws-fips<4.15.0-2113.119

4.15.0-2113.119

ubuntu/linux-azure-fips<4.15.0-2092.98

4.15.0-2092.98

ubuntu/linux-fips<4.15.0-1129.140

4.15.0-1129.140

ubuntu/linux-gcp-fips<4.15.0-2076.81

4.15.0-2076.81

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-200.220

5.4.0-200.220

ubuntu/linux-aws<5.4.0-1135.145

5.4.0-1135.145

ubuntu/linux-aws-5.15<5.15.0-1072.78~20.04.1

5.15.0-1072.78~20.04.1

ubuntu/linux-azure<5.4.0-1140.147

5.4.0-1140.147

ubuntu/linux-azure-5.15<5.15.0-1078.87~20.04.1

5.15.0-1078.87~20.04.1

ubuntu/linux-bluefield<5.4.0-1095.102

5.4.0-1095.102

ubuntu/linux-gcp<5.4.0-1139.148

5.4.0-1139.148

ubuntu/linux-gcp-5.15<5.15.0-1071.79~20.04.1

5.15.0-1071.79~20.04.1

ubuntu/linux-gkeop<5.4.0-1102.106

5.4.0-1102.106

ubuntu/linux-gkeop-5.15<5.15.0-1055.62~20.04.1

5.15.0-1055.62~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-125.135~20.04.1

5.15.0-125.135~20.04.1

ubuntu/linux-ibm<5.4.0-1082.87

5.4.0-1082.87

ubuntu/linux-ibm-5.15<5.15.0-1065.68~20.04.1

5.15.0-1065.68~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1067.73~20.04.1

5.15.0-1067.73~20.04.1

ubuntu/linux-iot<5.4.0-1044.45

5.4.0-1044.45

ubuntu/linux-kvm<5.4.0-1123.131

5.4.0-1123.131

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-125.135~20.04.1

5.15.0-125.135~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1032.32~20.04.1

5.15.0-1032.32~20.04.1

ubuntu/linux-oracle<5.4.0-1134.143

5.4.0-1134.143

ubuntu/linux-oracle-5.15<5.15.0-1070.76~20.04.1

5.15.0-1070.76~20.04.1

ubuntu/linux-raspi<5.4.0-1119.131

5.4.0-1119.131

ubuntu/linux-riscv-5.15<5.15.0-1068.72~20.04.1

5.15.0-1068.72~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1054.58

5.4.0-1054.58

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1135.145+fips1

5.4.0-1135.145+fips1

ubuntu/linux-azure-fips<5.4.0-1140.147+fips1

5.4.0-1140.147+fips1

ubuntu/linux-fips<5.4.0-1109.119

5.4.0-1109.119

ubuntu/linux-gcp-fips<5.4.0-1139.148+fips1

5.4.0-1139.148+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-125.135

5.15.0-125.135

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1072.78

5.15.0-1072.78

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1020.22~22.04.1

6.8.0-1020.22~22.04.1

ubuntu/linux-azure<5.15.0-1075.84

5.15.0-1075.84

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1020.23~22.04.1

6.8.0-1020.23~22.04.1

ubuntu/linux-azure-fde<5.15.0-1076.85.1

5.15.0-1076.85.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1071.79

5.15.0-1071.79

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1019.21~22.04.1

6.8.0-1019.21~22.04.1

ubuntu/linux-gke<5.15.0-1069.75

5.15.0-1069.75

ubuntu/linux-gkeop<5.15.0-1055.62

5.15.0-1055.62

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-50.51~22.04.1

6.8.0-50.51~22.04.1

ubuntu/linux-ibm<5.15.0-1065.68

5.15.0-1065.68

ubuntu/linux-ibm-6.8<6.8.0-1017.17~22.04.1

6.8.0-1017.17~22.04.1

ubuntu/linux-intel-iotg<5.15.0-1067.73

5.15.0-1067.73

ubuntu/linux-kvm<5.15.0-1069.74

5.15.0-1069.74

ubuntu/linux-lowlatency<5.15.0-125.135

5.15.0-125.135

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-50.51.1~22.04.1

6.8.0-50.51.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1067.68

5.15.0-1067.68

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1019.21~22.04.1

6.8.0-1019.21~22.04.1

ubuntu/linux-nvidia-tegra<5.15.0-1032.32

5.15.0-1032.32

ubuntu/linux-nvidia-tegra-igx<5.15.0-1020.20

5.15.0-1020.20

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1070.76

5.15.0-1070.76

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1017.18~22.04.1

6.8.0-1017.18~22.04.1

ubuntu/linux-raspi<5.15.0-1065.68

5.15.0-1065.68

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-50.51.1~22.04.1

6.8.0-50.51.1~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1038.42

5.15.0-1038.42

ubuntu/linux-bluefield<5.15.0-1056.58

5.15.0-1056.58

ubuntu/linux-intel-iot-realtime<5.15.0-1066.68

5.15.0-1066.68

ubuntu/linux-realtime<5.15.0-1073.81

5.15.0-1073.81

ubuntu/linux-realtime-6.8<6.8.1-1013.14~22.04.1

6.8.1-1013.14~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1072.78+fips1

5.15.0-1072.78+fips1

ubuntu/linux-azure-fips<5.15.0-1075.84+fips1

5.15.0-1075.84+fips1

ubuntu/linux-fips<5.15.0-125.135+fips1

5.15.0-125.135+fips1

ubuntu/linux-gcp-fips<5.15.0-1071.79+fips1

5.15.0-1071.79+fips1

ubuntu/linux<6.8.0-50.51

6.8.0-50.51

ubuntu/linux-aws<6.8.0-1020.22

6.8.0-1020.22

ubuntu/linux-azure<6.8.0-1020.23

6.8.0-1020.23

ubuntu/linux-gcp<6.8.0-1019.21

6.8.0-1019.21

ubuntu/linux-gke<6.8.0-1015.19

6.8.0-1015.19

ubuntu/linux-gkeop<6.8.0-1002.4

6.8.0-1002.4

ubuntu/linux-ibm<6.8.0-1017.17

6.8.0-1017.17

ubuntu/linux-lowlatency<6.8.0-50.51.1

6.8.0-50.51.1

ubuntu/linux-nvidia<6.8.0-1019.21

6.8.0-1019.21

ubuntu/linux-nvidia-lowlatency<6.8.0-1019.21.1

6.8.0-1019.21.1

ubuntu/linux-oem-6.8<6.8.0-1018.18

6.8.0-1018.18

ubuntu/linux-oracle<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi<6.8.0-1016.18

6.8.0-1016.18

ubuntu/linux-riscv<6.8.0-50.51.1

6.8.0-50.51.1

ubuntu/linux-xilinx<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi-realtime<6.8.0-2015.16

6.8.0-2015.16

ubuntu/linux-realtime<6.8.1-1013.14

6.8.1-1013.14

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1138.144
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1183.198~14.04.1
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-261.295~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-261.295
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1176.191
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1175.188~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1183.198~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1168.185~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-231.243~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1139.149
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1137.148~16.04.1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.4.0-1107.114
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-231.243
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1175.188
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.145~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1183.198
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.147~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1168.185
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1139.148~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-200.220~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1082.87~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1158.163
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1137.148
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1134.143~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1119.131~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2113.119
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2092.98
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1129.140
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2076.81
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-200.220
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.145
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.78~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.147
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.87~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1095.102
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1139.148
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.79~20.04.1
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1102.106
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.62~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1082.87
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.68~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.73~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1044.45
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1123.131
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.32~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1134.143
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.76~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1119.131
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.72~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1054.58
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.145+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.147+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1109.119
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1139.148+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.78
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.22~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1075.84
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.23~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1076.85.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.79
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1069.75
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.62
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.68
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.17~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.73
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1069.74
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.68
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.32
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.20
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.76
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.68
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51.1~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1038.42
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1056.58
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.68
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1073.81
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1013.14~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.78+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1075.84+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.79+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.22
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.23
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1015.19
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1002.4
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.17
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21.1
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1018.18
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1016.18
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51.1
Upgrade
Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2015.16
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1013.14
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1

Event History

Sep 18, 2024

CVE Published

via OSV·08:15 AM

Data Sourced

via OSV·08:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which Ubuntu kernel package variants are listed as affected?

The listed software includes ubuntu/linux, ubuntu/linux-aws, ubuntu/linux-azure, ubuntu/linux-gcp, ubuntu/linux-fips, ubuntu/linux-aws-fips, ubuntu/linux-azure-fips, and ubuntu/linux-gcp-fips. No affected or fixed version ranges are provided.

What level of access does an attacker need?

The vector is local with low attack complexity and low privileges required. No user interaction is required.

What is the potential security impact?

The supplied severity vector indicates high confidentiality and availability impact, with no integrity impact. The reported failure is an out-of-bounds read in the kernel interrupt-map parsing path.

What configuration condition is associated with the issue?

The issue occurs when of_irq_parse_raw() is invoked with a device address that is smaller than the interrupt parent node's #address-cells property. The data does not state whether this condition exists in default Ubuntu configurations.

UBUNTU-CVE-2024-46743: High severity ubuntu/linux-aws vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which Ubuntu kernel package variants are listed as affected?

What level of access does an attacker need?

What is the potential security impact?

What configuration condition is associated with the issue?

Company

Resources

Contact

Frequently Asked Questions

Which Ubuntu kernel package variants are listed as affected?

What level of access does an attacker need?

What is the potential security impact?

What configuration condition is associated with the issue?