USN-6864-3: Linux kernel (GKE) vulnerabilities
It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823) A security issue was discovered in the Linux kernel. An attacker could possibly use it to compromise the system. This update corrects flaws in the following subsystem:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1005-gketo a version that resolves this vulnerability.Fixed in 6.8.0-1005.8 - Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 6.8.0-1005.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-6864-3
Event History
Frequently Asked Questions
What is the severity of USN-6864-3?
The vulnerability USN-6864-3 is identified as a security issue that allows unprivileged users to gain direct access to devices, potentially leading to a denial of service.
How do I fix USN-6864-3?
To mitigate the USN-6864-3 vulnerability, it is recommended to update to the specified version of the package, linux-image-6.8.0-1005-gke, or linux-image-gke, for Ubuntu 24.04.
Who is affected by USN-6864-3?
USN-6864-3 affects users running Ubuntu 24.04 with the vulnerable Intel Data Streaming and Intel Analytics Accelerator drivers within the Linux kernel.
What type of attacks does USN-6864-3 enable?
The USN-6864-3 vulnerability can be exploited by local attackers to generate a denial of service by gaining unauthorized access to hardware devices.
Is there a workaround for USN-6864-3?
As of now, the primary mitigation solution for USN-6864-3 is to apply the latest updates for the affected packages as no specific workaround has been recommended.