UBUNTU-CVE-2024-46771: Medium severity ubuntu/linux vulnerability

Published Sep 18, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved: can: bcm: Remove proc entry when dev is unregistered. syzkaller reported a warning in bcmconnect() below. [0] The repro calls connect() to vxcan1, removes vxcan1, and calls connect() with ifindex == 0. Calling connect() for a BCM socket allocates a proc entry. Then, bcmsk(sk)->bound is set to 1 to prevent further connect(). However, removing the bound device resets bcmsk(sk)->bound to 0 in bcmnotify(). The 2nd connect() tries to allocate a proc entry with the same name and sets NULL to bcmsk(sk)->bcmprocread, leaking the original proc entry. Since the proc entry is available only for connect()ed sockets, let's clean up the entry when the bound netdev is unregistered. [0]: procdirentry 'can-bcm/2456' already registered WARNING: CPU: 1 PID: 394 at fs/proc/generic.c:376 procregister+0x645/0x8f0 fs/proc/generic.c:375 Modules linked in: CPU: 1 PID: 394 Comm: syz-executor403 Not tainted 6.10.0-rc7-g852e42cc2dd4 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 RIP: 0010:procregister+0x645/0x8f0 fs/proc/generic.c:375 Code: 00 00 00 00 00 48 85 ed 0f 85 97 02 00 00 4d 85 f6 0f 85 9f 02 00 00 48 c7 c7 9b cb cf 87 48 89 de 4c 89 fa e8 1c 6f eb fe 90 <0f> 0b 90 90 48 c7 c7 98 37 99 89 e8 cb 7e 22 05 bb 00 00 00 10 48 RSP: 0018:ffa0000000cd7c30 EFLAGS: 00010246 RAX: 9e129be1950f0200 RBX: ff1100011b51582c RCX: ff1100011857cd80 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 RBP: 0000000000000000 R08: ffd400000000000f R09: ff1100013e78cac0 R10: ffac800000cd7980 R11: ff1100013e12b1f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ff1100011a99a2ec FS: 00007fbd7086f740(0000) GS:ff1100013fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200071c0 CR3: 0000000118556004 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> proccreatenetsingle+0x144/0x210 fs/proc/procnet.c:220 bcmconnect+0x472/0x840 net/can/bcm.c:1673 sysconnectfile net/socket.c:2049 [inline] sysconnect+0x5d2/0x690 net/socket.c:2066 dosysconnect net/socket.c:2076 [inline] sesysconnect net/socket.c:2073 [inline] x64sysconnect+0x8f/0x100 net/socket.c:2073 dosyscallx64 arch/x86/entry/common.c:52 [inline] dosyscall64+0xd9/0x1c0 arch/x86/entry/common.c:83 entrySYSCALL64afterhwframe+0x4b/0x53 RIP: 0033:0x7fbd708b0e5d Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 9f 1b 00 f7 d8 64 89 01 48 RSP: 002b:00007fff8cd33f08 EFLAGS: 00000246 ORIGRAX: 000000000000002a RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbd708b0e5d RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000040 R09: 0000000000000040 R10: 0000000000000040 R11: 0000000000000246 R12: 00007fff8cd34098 R13: 0000000000401280 R14: 0000000000406de8 R15: 00007fbd70ab9000 </TASK> removeprocentry: removing non-empty directory 'net/can-bcm', leaking at least '2456'

Affected Software

196 affected componentsFixes available
ubuntu/linux*
ubuntu/linux-aws<4.4.0-1143.149
4.4.0-1143.149
ubuntu/linux-azure<4.15.0-1188.203~14.04.1
4.15.0-1188.203~14.04.1
ubuntu/linux-lts-xenial<4.4.0-268.302~14.04.1
4.4.0-268.302~14.04.1
ubuntu/linux<4.4.0-268.302
4.4.0-268.302
ubuntu/linux-aws<4.4.0-1181.196
4.4.0-1181.196
ubuntu/linux-aws-hwe<4.15.0-1180.193~16.04.1
4.15.0-1180.193~16.04.1
ubuntu/linux-azure<4.15.0-1188.203~16.04.1
4.15.0-1188.203~16.04.1
ubuntu/linux-gcp<4.15.0-1173.190~16.04.1
4.15.0-1173.190~16.04.1
ubuntu/linux-hwe<4.15.0-237.249~16.04.1
4.15.0-237.249~16.04.1
ubuntu/linux-kvm<4.4.0-1144.155
4.4.0-1144.155
ubuntu/linux-oracle<4.15.0-1142.153~16.04.1
4.15.0-1142.153~16.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-fips<4.4.0-1113.120
4.4.0-1113.120
ubuntu/linux-fips*
ubuntu/linux<4.15.0-237.249
4.15.0-237.249
ubuntu/linux-aws<4.15.0-1180.193
4.15.0-1180.193
ubuntu/linux-aws-5.0*
ubuntu/linux-aws-5.3*
ubuntu/linux-aws-5.4<5.4.0-1135.145~18.04.1
5.4.0-1135.145~18.04.1
ubuntu/linux-azure*
ubuntu/linux-azure-4.15<4.15.0-1188.203
4.15.0-1188.203
ubuntu/linux-azure-5.3*
ubuntu/linux-azure-5.4<5.4.0-1140.147~18.04.1
5.4.0-1140.147~18.04.1
ubuntu/linux-azure-edge*
ubuntu/linux-gcp*
ubuntu/linux-gcp-4.15<4.15.0-1173.190
4.15.0-1173.190
ubuntu/linux-gcp-5.3*
ubuntu/linux-gcp-5.4<5.4.0-1139.148~18.04.1
5.4.0-1139.148~18.04.1
ubuntu/linux-gke-4.15*
ubuntu/linux-gke-5.4*
ubuntu/linux-gkeop-5.4*
ubuntu/linux-hwe*
ubuntu/linux-hwe-5.4<5.4.0-200.220~18.04.1
5.4.0-200.220~18.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-ibm-5.4<5.4.0-1082.87~18.04.1
5.4.0-1082.87~18.04.1
ubuntu/linux-kvm<4.15.0-1163.168
4.15.0-1163.168
ubuntu/linux-oem*
ubuntu/linux-oracle<4.15.0-1142.153
4.15.0-1142.153
ubuntu/linux-oracle-5.0*
ubuntu/linux-oracle-5.3*
ubuntu/linux-oracle-5.4<5.4.0-1134.143~18.04.1
5.4.0-1134.143~18.04.1
ubuntu/linux-raspi-5.4<5.4.0-1119.131~18.04.1
5.4.0-1119.131~18.04.1
ubuntu/linux-aws-fips<4.15.0-2118.124
4.15.0-2118.124
ubuntu/linux-azure-fips<4.15.0-2097.103
4.15.0-2097.103
ubuntu/linux-fips<4.15.0-1135.146
4.15.0-1135.146
ubuntu/linux-gcp-fips<4.15.0-2081.87
4.15.0-2081.87
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.4.0-200.220
5.4.0-200.220
ubuntu/linux-aws<5.4.0-1135.145
5.4.0-1135.145
ubuntu/linux-aws-5.15<5.15.0-1072.78~20.04.1
5.15.0-1072.78~20.04.1
ubuntu/linux-azure<5.4.0-1140.147
5.4.0-1140.147
ubuntu/linux-azure-5.15<5.15.0-1078.87~20.04.1
5.15.0-1078.87~20.04.1
ubuntu/linux-bluefield<5.4.0-1095.102
5.4.0-1095.102
ubuntu/linux-gcp<5.4.0-1139.148
5.4.0-1139.148
ubuntu/linux-gcp-5.15<5.15.0-1071.79~20.04.1
5.15.0-1071.79~20.04.1
ubuntu/linux-gkeop<5.4.0-1102.106
5.4.0-1102.106
ubuntu/linux-gkeop-5.15<5.15.0-1055.62~20.04.1
5.15.0-1055.62~20.04.1
ubuntu/linux-hwe-5.15<5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
ubuntu/linux-ibm<5.4.0-1082.87
5.4.0-1082.87
ubuntu/linux-ibm-5.15<5.15.0-1065.68~20.04.1
5.15.0-1065.68~20.04.1
ubuntu/linux-intel-iotg-5.15<5.15.0-1067.73~20.04.1
5.15.0-1067.73~20.04.1
ubuntu/linux-iot<5.4.0-1044.45
5.4.0-1044.45
ubuntu/linux-kvm<5.4.0-1123.131
5.4.0-1123.131
ubuntu/linux-lowlatency-hwe-5.15<5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
ubuntu/linux-nvidia-tegra-5.15<5.15.0-1032.32~20.04.1
5.15.0-1032.32~20.04.1
ubuntu/linux-oracle<5.4.0-1134.143
5.4.0-1134.143
ubuntu/linux-oracle-5.15<5.15.0-1070.76~20.04.1
5.15.0-1070.76~20.04.1
ubuntu/linux-raspi<5.4.0-1119.131
5.4.0-1119.131
ubuntu/linux-riscv-5.15<5.15.0-1068.72~20.04.1
5.15.0-1068.72~20.04.1
ubuntu/linux-xilinx-zynqmp<5.4.0-1054.58
5.4.0-1054.58
ubuntu/linux-aws-5.11*
ubuntu/linux-aws-5.13*
ubuntu/linux-aws-5.8*
ubuntu/linux-azure-5.11*
ubuntu/linux-azure-5.13*
ubuntu/linux-azure-5.8*
ubuntu/linux-azure-fde*
ubuntu/linux-gcp-5.11*
ubuntu/linux-gcp-5.13*
ubuntu/linux-gcp-5.8*
ubuntu/linux-gke*
ubuntu/linux-gke-5.15*
ubuntu/linux-hwe-5.11*
ubuntu/linux-hwe-5.13*
ubuntu/linux-hwe-5.8*
ubuntu/linux-intel-5.13*
ubuntu/linux-oem-5.10*
ubuntu/linux-oem-5.13*
ubuntu/linux-oem-5.6*
ubuntu/linux-oracle-5.11*
ubuntu/linux-oracle-5.13*
ubuntu/linux-oracle-5.8*
ubuntu/linux-raspi2*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.11*
ubuntu/linux-riscv-5.8*
ubuntu/linux-aws-fips<5.4.0-1135.145+fips1
5.4.0-1135.145+fips1
ubuntu/linux-azure-fips<5.4.0-1140.147+fips1
5.4.0-1140.147+fips1
ubuntu/linux-fips<5.4.0-1109.119
5.4.0-1109.119
ubuntu/linux-gcp-fips<5.4.0-1139.148+fips1
5.4.0-1139.148+fips1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.15.0-125.135
5.15.0-125.135
ubuntu/linux-allwinner-5.19*
ubuntu/linux-aws<5.15.0-1072.78
5.15.0-1072.78
ubuntu/linux-aws-5.19*
ubuntu/linux-aws-6.2*
ubuntu/linux-aws-6.5*
ubuntu/linux-aws-6.8<6.8.0-1020.22~22.04.1
6.8.0-1020.22~22.04.1
ubuntu/linux-azure<5.15.0-1075.84
5.15.0-1075.84
ubuntu/linux-azure-5.19*
ubuntu/linux-azure-6.2*
ubuntu/linux-azure-6.5*
ubuntu/linux-azure-6.8<6.8.0-1020.23~22.04.1
6.8.0-1020.23~22.04.1
ubuntu/linux-azure-fde<5.15.0-1076.85.1
5.15.0-1076.85.1
ubuntu/linux-azure-fde-5.19*
ubuntu/linux-azure-fde-6.2*
ubuntu/linux-gcp<5.15.0-1071.79
5.15.0-1071.79
ubuntu/linux-gcp-5.19*
ubuntu/linux-gcp-6.2*
ubuntu/linux-gcp-6.5*
ubuntu/linux-gcp-6.8<6.8.0-1019.21~22.04.1
6.8.0-1019.21~22.04.1
ubuntu/linux-gke<5.15.0-1069.75
5.15.0-1069.75
ubuntu/linux-gkeop<5.15.0-1055.62
5.15.0-1055.62
ubuntu/linux-hwe-5.19*
ubuntu/linux-hwe-6.2*
ubuntu/linux-hwe-6.5*
ubuntu/linux-hwe-6.8<6.8.0-50.51~22.04.1
6.8.0-50.51~22.04.1
ubuntu/linux-ibm<5.15.0-1065.68
5.15.0-1065.68
ubuntu/linux-ibm-6.8<6.8.0-1017.17~22.04.1
6.8.0-1017.17~22.04.1
ubuntu/linux-intel-iotg<5.15.0-1067.73
5.15.0-1067.73
ubuntu/linux-kvm<5.15.0-1069.74
5.15.0-1069.74
ubuntu/linux-lowlatency<5.15.0-125.135
5.15.0-125.135
ubuntu/linux-lowlatency-hwe-5.19*
ubuntu/linux-lowlatency-hwe-6.2*
ubuntu/linux-lowlatency-hwe-6.5*
ubuntu/linux-lowlatency-hwe-6.8<6.8.0-50.51.1~22.04.1
6.8.0-50.51.1~22.04.1
ubuntu/linux-nvidia<5.15.0-1067.68
5.15.0-1067.68
ubuntu/linux-nvidia-6.2*
ubuntu/linux-nvidia-6.5*
ubuntu/linux-nvidia-6.8<6.8.0-1019.21~22.04.1
6.8.0-1019.21~22.04.1
ubuntu/linux-nvidia-tegra<5.15.0-1032.32
5.15.0-1032.32
ubuntu/linux-nvidia-tegra-igx<5.15.0-1020.20
5.15.0-1020.20
ubuntu/linux-oem-5.17*
ubuntu/linux-oem-6.0*
ubuntu/linux-oem-6.1*
ubuntu/linux-oem-6.5*
ubuntu/linux-oracle<5.15.0-1070.76
5.15.0-1070.76
ubuntu/linux-oracle-6.5*
ubuntu/linux-oracle-6.8<6.8.0-1017.18~22.04.1
6.8.0-1017.18~22.04.1
ubuntu/linux-raspi<5.15.0-1065.68
5.15.0-1065.68
ubuntu/linux-realtime*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.19*
ubuntu/linux-riscv-6.5*
ubuntu/linux-riscv-6.8<6.8.0-50.51.1~22.04.1
6.8.0-50.51.1~22.04.1
ubuntu/linux-starfive-5.19*
ubuntu/linux-starfive-6.2*
ubuntu/linux-starfive-6.5*
ubuntu/linux-xilinx-zynqmp<5.15.0-1038.42
5.15.0-1038.42
ubuntu/linux-bluefield<5.15.0-1056.58
5.15.0-1056.58
ubuntu/linux-intel-iot-realtime<5.15.0-1066.68
5.15.0-1066.68
ubuntu/linux-realtime<5.15.0-1073.81
5.15.0-1073.81
ubuntu/linux-realtime-6.8<6.8.1-1013.14~22.04.1
6.8.1-1013.14~22.04.1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux-aws-fips<5.15.0-1072.78+fips1
5.15.0-1072.78+fips1
ubuntu/linux-azure-fips<5.15.0-1075.84+fips1
5.15.0-1075.84+fips1
ubuntu/linux-fips<5.15.0-125.135+fips1
5.15.0-125.135+fips1
ubuntu/linux-gcp-fips<5.15.0-1071.79+fips1
5.15.0-1071.79+fips1
ubuntu/linux<6.8.0-50.51
6.8.0-50.51
ubuntu/linux-aws<6.8.0-1020.22
6.8.0-1020.22
ubuntu/linux-azure<6.8.0-1020.23
6.8.0-1020.23
ubuntu/linux-gcp<6.8.0-1019.21
6.8.0-1019.21
ubuntu/linux-gke<6.8.0-1015.19
6.8.0-1015.19
ubuntu/linux-gkeop<6.8.0-1002.4
6.8.0-1002.4
ubuntu/linux-ibm<6.8.0-1017.17
6.8.0-1017.17
ubuntu/linux-lowlatency<6.8.0-50.51.1
6.8.0-50.51.1
ubuntu/linux-nvidia<6.8.0-1019.21
6.8.0-1019.21
ubuntu/linux-nvidia-lowlatency<6.8.0-1019.21.1
6.8.0-1019.21.1
ubuntu/linux-oem-6.8<6.8.0-1018.18
6.8.0-1018.18
ubuntu/linux-oracle<6.8.0-1017.18
6.8.0-1017.18
ubuntu/linux-raspi<6.8.0-1016.18
6.8.0-1016.18
ubuntu/linux-riscv<6.8.0-50.51.1
6.8.0-50.51.1
ubuntu/linux-xilinx<6.8.0-1017.18
6.8.0-1017.18
ubuntu/linux-raspi-realtime<6.8.0-2015.16
6.8.0-2015.16
ubuntu/linux-realtime<6.8.1-1013.14
6.8.1-1013.14
ubuntu/linux-fips<6.8.0-78.78+fips1
6.8.0-78.78+fips1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1143.149
  2. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1188.203~14.04.1
  3. Upgrade

    Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.

    Fixed in 4.4.0-268.302~14.04.1
  4. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.4.0-268.302
  5. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1181.196
  6. Upgrade

    Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-1180.193~16.04.1
  7. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1188.203~16.04.1
  8. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 4.15.0-1173.190~16.04.1
  9. Upgrade

    Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-237.249~16.04.1
  10. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.4.0-1144.155
  11. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1142.153~16.04.1
  12. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.4.0-1113.120
  13. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.15.0-237.249
  14. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.15.0-1180.193
  15. Upgrade

    Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1135.145~18.04.1
  16. Upgrade

    Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1188.203
  17. Upgrade

    Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1140.147~18.04.1
  18. Upgrade

    Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1173.190
  19. Upgrade

    Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1139.148~18.04.1
  20. Upgrade

    Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-200.220~18.04.1
  21. Upgrade

    Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1082.87~18.04.1
  22. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.15.0-1163.168
  23. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1142.153
  24. Upgrade

    Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1134.143~18.04.1
  25. Upgrade

    Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1119.131~18.04.1
  26. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2118.124
  27. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2097.103
  28. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-1135.146
  29. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2081.87
  30. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.4.0-200.220
  31. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.4.0-1135.145
  32. Upgrade

    Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1072.78~20.04.1
  33. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.4.0-1140.147
  34. Upgrade

    Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1078.87~20.04.1
  35. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.4.0-1095.102
  36. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1139.148
  37. Upgrade

    Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.79~20.04.1
  38. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.4.0-1102.106
  39. Upgrade

    Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.62~20.04.1
  40. Upgrade

    Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135~20.04.1
  41. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1082.87
  42. Upgrade

    Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.68~20.04.1
  43. Upgrade

    Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.73~20.04.1
  44. Upgrade

    Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.

    Fixed in 5.4.0-1044.45
  45. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1123.131
  46. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135~20.04.1
  47. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1032.32~20.04.1
  48. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.4.0-1134.143
  49. Upgrade

    Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1070.76~20.04.1
  50. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.4.0-1119.131
  51. Upgrade

    Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1068.72~20.04.1
  52. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1054.58
  53. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1135.145+fips1
  54. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1140.147+fips1
  55. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1109.119
  56. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1139.148+fips1
  57. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135
  58. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.15.0-1072.78
  59. Upgrade

    Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1020.22~22.04.1
  60. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.15.0-1075.84
  61. Upgrade

    Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1020.23~22.04.1
  62. Upgrade

    Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.

    Fixed in 5.15.0-1076.85.1
  63. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.79
  64. Upgrade

    Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1019.21~22.04.1
  65. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.75
  66. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.62
  67. Upgrade

    Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-50.51~22.04.1
  68. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.68
  69. Upgrade

    Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1017.17~22.04.1
  70. Upgrade

    Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.73
  71. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.74
  72. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135
  73. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-50.51.1~22.04.1
  74. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.68
  75. Upgrade

    Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1019.21~22.04.1
  76. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.

    Fixed in 5.15.0-1032.32
  77. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.

    Fixed in 5.15.0-1020.20
  78. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1070.76
  79. Upgrade

    Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1017.18~22.04.1
  80. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.68
  81. Upgrade

    Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-50.51.1~22.04.1
  82. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1038.42
  83. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.15.0-1056.58
  84. Upgrade

    Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1066.68
  85. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1073.81
  86. Upgrade

    Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.1-1013.14~22.04.1
  87. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1072.78+fips1
  88. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1075.84+fips1
  89. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135+fips1
  90. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.79+fips1
  91. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 6.8.0-50.51
  92. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 6.8.0-1020.22
  93. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 6.8.0-1020.23
  94. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 6.8.0-1019.21
  95. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 6.8.0-1015.19
  96. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 6.8.0-1002.4
  97. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 6.8.0-1017.17
  98. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 6.8.0-50.51.1
  99. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 6.8.0-1019.21
  100. Upgrade

    Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.

    Fixed in 6.8.0-1019.21.1
  101. Upgrade

    Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1018.18
  102. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 6.8.0-1017.18
  103. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 6.8.0-1016.18
  104. Upgrade

    Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.

    Fixed in 6.8.0-50.51.1
  105. Upgrade

    Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.

    Fixed in 6.8.0-1017.18
  106. Upgrade

    Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.0-2015.16
  107. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.1-1013.14
  108. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 6.8.0-78.78+fips1

Event History

Sep 18, 2024
CVE Published
via OSV·08:15 AM
Data Sourced
via OSV·08:15 AM
DescriptionSeverityAffected Software

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203