USN-6766-3: Linux kernel (AWS) vulnerabilities
It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151) Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201) Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-23849) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6766-3?
The severity of USN-6766-3 is categorized as high due to the potential for denial of service caused by stack overflow.
How do I fix USN-6766-3?
To fix USN-6766-3, you should upgrade to the recommended Linux kernel versions provided in the advisory.
What systems are affected by USN-6766-3?
USN-6766-3 affects Ubuntu 20.04 and 22.04 systems running specific versions of the Linux kernel.
Can USN-6766-3 lead to system crashes?
Yes, USN-6766-3 can lead to system crashes if a local attacker exploits the stack overflow vulnerability.
Is there a workaround for USN-6766-3?
There are no known workarounds for USN-6766-3, so applying the necessary updates is crucial.