USN-6874-1: Linux kernel (Azure) vulnerabilities
It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-6.5.0-1023-azureto a version that resolves this vulnerability.Fixed in 6.5.0-1023.24 - Upgrade
Upgrade
ubuntu/linux-image-6.5.0-1023-azure-fdeto a version that resolves this vulnerability.Fixed in 6.5.0-1023.24 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 6.5.0.1023.27 - Upgrade
Upgrade
ubuntu/linux-image-azure-fdeto a version that resolves this vulnerability.Fixed in 6.5.0.1023.27 - Upgrade
Upgrade
ubuntu/linux-image-6.5.0-1023-azureto a version that resolves this vulnerability.Fixed in 6.5.0-1023.24~22.04.1 - Upgrade
Upgrade
ubuntu/linux-image-6.5.0-1023-azure-fdeto a version that resolves this vulnerability.Fixed in 6.5.0-1023.24~22.04.1 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 6.5.0.1023.24~22.04.1 - Upgrade
Upgrade
ubuntu/linux-image-azure-fdeto a version that resolves this vulnerability.Fixed in 6.5.0.1023.24~22.04.1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6874-1?
The severity of USN-6874-1 is categorized as critical due to the potential for a local attacker to cause a denial of service.
How do I fix USN-6874-1?
To fix USN-6874-1, upgrade to the recommended version of the linux-image package for your Ubuntu release.
Which versions of Ubuntu are affected by USN-6874-1?
USN-6874-1 affects Ubuntu versions 22.04 and 23.10 that use specific linux-image packages.
What vulnerabilities are addressed in USN-6874-1?
USN-6874-1 addresses several vulnerabilities, including CVE-2024-21823 and others related to device access for unprivileged users.
Can a virtual machine exploit the vulnerability in USN-6874-1?
Yes, a virtual machine can exploit the vulnerability found in USN-6874-1, allowing a local attacker to gain unauthorized access.