USN-6864-1: Linux kernel vulnerabilities
It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823) A security issue was discovered in the Linux kernel. An attacker could possibly use it to compromise the system. This update corrects flaws in the following subsystem:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1006-intelto a version that resolves this vulnerability.Fixed in 6.8.0-1006.13 - Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1009-gcpto a version that resolves this vulnerability.Fixed in 6.8.0-1009.10 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 6.8.0-1009.10 - Upgrade
Upgrade
ubuntu/linux-image-intelto a version that resolves this vulnerability.Fixed in 6.8.0-1006.13 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch USN-6864-1
Event History
Frequently Asked Questions
What is the severity of USN-6864-1?
The severity of USN-6864-1 is significant, as it allows unprivileged access to devices which can lead to a denial of service.
How do I fix USN-6864-1?
To fix USN-6864-1, update your Linux kernel to the recommended versions 6.8.0-1006.13 or 6.8.0-1009.10 for Ubuntu 24.04.
Who is affected by USN-6864-1?
Users of Ubuntu 24.04 running specific versions of the Intel Data Streaming and Intel Analytics Accelerator drivers are affected by USN-6864-1.
What are the potential impacts of USN-6864-1?
The potential impacts of USN-6864-1 include denial of service and unauthorized access to system devices by local attackers.
Is there a known exploit for USN-6864-1?
Currently, there is no public knowledge of an active exploit specifically targeting the vulnerability detailed in USN-6864-1.