USN-6868-2: Linux kernel (AWS) vulnerabilities
Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6868-2?
The severity of USN-6868-2 is critical due to its potential to allow local attackers to exploit branch history injection vulnerabilities.
How do I fix USN-6868-2?
To fix USN-6868-2, update to the patched versions of the linux-image packages for Ubuntu 18.04, specifically linux-image-5.4.0-1127.137~18.04.2 or linux-image-aws-5.4.0-1127.137~18.04.1.
Who is affected by USN-6868-2?
USN-6868-2 affects users and systems running Ubuntu 18.04 with the specified linux-image packages that are vulnerable to branch history injection.
What is the vulnerability identified in USN-6868-2?
The USN-6868-2 addresses insufficient mitigations for the initial Branch History Injection vulnerability, CVE-2022-0001.
Is USN-6868-2 related to any specific hardware?
Yes, USN-6868-2 specifically impacts Intel processors where the mitigation measures for the branch history injection vulnerability are not sufficient.