USN-6767-2: Linux kernel (BlueField) vulnerabilities
Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-23849) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6767-2?
USN-6767-2 is classified as a critical vulnerability due to its potential to cause denial of service.
How do I fix USN-6767-2?
You can fix USN-6767-2 by updating to the recommended package versions for Ubuntu 20.04, specifically linux-image-5.4.0-1084.91 or linux-image-bluefield-5.4.0.1084.80.
What causes the vulnerability noted in USN-6767-2?
The vulnerability in USN-6767-2 is caused by an out-of-bounds read in the RDS Protocol implementation of the Linux kernel.
Which Ubuntu versions are affected by USN-6767-2?
USN-6767-2 affects Ubuntu 20.04 with specific vulnerable kernel package versions.
Can USN-6767-2 be exploited remotely?
Yes, USN-6767-2 can potentially be exploited remotely, allowing an attacker to crash the system.