USN-6918-1: Linux kernel vulnerabilities
It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1008-oracleto a version that resolves this vulnerability.Fixed in 6.8.0-1008.8 - Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1008-oracle-64kto a version that resolves this vulnerability.Fixed in 6.8.0-1008.8 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 6.8.0-1008.8 - Upgrade
Upgrade
ubuntu/linux-image-oracle-64kto a version that resolves this vulnerability.Fixed in 6.8.0-1008.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-6918-1
Event History
Frequently Asked Questions
What is the severity of USN-6918-1?
The severity of USN-6918-1 is significant, as it allows a privileged local attacker to cause a denial of service in the Bluetooth subsystem of the Linux kernel.
How do I fix USN-6918-1?
To fix USN-6918-1, upgrade to the corrected package version 6.8.0-1008.8 available for Ubuntu 24.04.
Who is affected by USN-6918-1?
USN-6918-1 affects users running the specified Linux kernel packages on Ubuntu 24.04.
What type of vulnerability is USN-6918-1?
USN-6918-1 describes a race condition vulnerability in the Bluetooth subsystem of the Linux kernel.
What can an attacker do with USN-6918-1?
An attacker exploiting USN-6918-1 can cause a denial of service, impacting system availability.