USN-6893-3: Linux kernel vulnerabilities
It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1011-awsto a version that resolves this vulnerability.Fixed in 6.8.0-1011.12 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 6.8.0-1011.12 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-6893-3
Event History
Frequently Asked Questions
What is the severity of USN-6893-3?
USN-6893-3 is classified as a medium severity vulnerability due to the potential for denial of service.
How do I fix USN-6893-3?
To fix USN-6893-3, update to the recommended version of the affected packages, specifically linux-image-6.8.0-1011.12.
Who is affected by USN-6893-3?
USN-6893-3 affects Ubuntu 24.04 users with the linux-image-6.8.0-1011-aws and linux-image-aws packages.
What causes the issue in USN-6893-3?
The issue in USN-6893-3 is caused by a race condition in the Bluetooth subsystem of the Linux kernel.
Can USN-6893-3 be exploited by remote attackers?
No, USN-6893-3 can only be exploited by a privileged local attacker.