- Vulnerability/
- USN-6923-1
29/7/2024
USN-6923-1: Linux kernel vulnerabilities
First published: Mon Jul 29 2024(Updated: )
Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-5.15.0-1049-gkeop | <5.15.0-1049.56 | 5.15.0-1049.56 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-1061-intel-iotg | <5.15.0-1061.67 | 5.15.0-1061.67 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-1061-nvidia | <5.15.0-1061.62 | 5.15.0-1061.62 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-1061-nvidia-lowlatency | <5.15.0-1061.62 | 5.15.0-1061.62 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-1063-gke | <5.15.0-1063.69 | 5.15.0-1063.69 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-1063-kvm | <5.15.0-1063.68 | 5.15.0-1063.68 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-1064-oracle | <5.15.0-1064.70 | 5.15.0-1064.70 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-1065-gcp | <5.15.0-1065.73 | 5.15.0-1065.73 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-1066-aws | <5.15.0-1066.72 | 5.15.0-1066.72 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-117-generic | <5.15.0-117.127 | 5.15.0-117.127 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-117-generic-64k | <5.15.0-117.127 | 5.15.0-117.127 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-117-generic-lpae | <5.15.0-117.127 | 5.15.0-117.127 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-117-lowlatency | <5.15.0-117.127 | 5.15.0-117.127 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-117-lowlatency-64k | <5.15.0-117.127 | 5.15.0-117.127 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-aws-lts-22.04 | <5.15.0.1066.66 | 5.15.0.1066.66 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-gcp-lts-22.04 | <5.15.0.1065.61 | 5.15.0.1065.61 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-generic | <5.15.0.117.117 | 5.15.0.117.117 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-generic-64k | <5.15.0.117.117 | 5.15.0.117.117 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-generic-lpae | <5.15.0.117.117 | 5.15.0.117.117 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-gke | <5.15.0.1063.62 | 5.15.0.1063.62 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-gke-5.15 | <5.15.0.1063.62 | 5.15.0.1063.62 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-gkeop | <5.15.0.1049.48 | 5.15.0.1049.48 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-gkeop-5.15 | <5.15.0.1049.48 | 5.15.0.1049.48 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-intel-iotg | <5.15.0.1061.61 | 5.15.0.1061.61 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-kvm | <5.15.0.1063.59 | 5.15.0.1063.59 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-lowlatency | <5.15.0.117.107 | 5.15.0.117.107 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-lowlatency-64k | <5.15.0.117.107 | 5.15.0.117.107 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-nvidia | <5.15.0.1061.61 | 5.15.0.1061.61 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-nvidia-lowlatency | <5.15.0.1061.61 | 5.15.0.1061.61 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-oracle-lts-22.04 | <5.15.0.1064.60 | 5.15.0.1064.60 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-virtual | <5.15.0.117.117 | 5.15.0.117.117 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-1049-gkeop | <5.15.0-1049.56~20.04.1 | 5.15.0-1049.56~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-1061-intel-iotg | <5.15.0-1061.67~20.04.1 | 5.15.0-1061.67~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-117-generic | <5.15.0-117.127~20.04.1 | 5.15.0-117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-117-generic-64k | <5.15.0-117.127~20.04.1 | 5.15.0-117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-117-generic-lpae | <5.15.0-117.127~20.04.1 | 5.15.0-117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-117-lowlatency | <5.15.0-117.127~20.04.1 | 5.15.0-117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.15.0-117-lowlatency-64k | <5.15.0-117.127~20.04.1 | 5.15.0-117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-generic-64k-hwe-20.04 | <5.15.0.117.127~20.04.1 | 5.15.0.117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-generic-hwe-20.04 | <5.15.0.117.127~20.04.1 | 5.15.0.117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-generic-lpae-hwe-20.04 | <5.15.0.117.127~20.04.1 | 5.15.0.117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-gkeop-5.15 | <5.15.0.1049.56~20.04.1 | 5.15.0.1049.56~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-intel | <5.15.0.1061.67~20.04.1 | 5.15.0.1061.67~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-intel-iotg | <5.15.0.1061.67~20.04.1 | 5.15.0.1061.67~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-lowlatency-64k-hwe-20.04 | <5.15.0.117.127~20.04.1 | 5.15.0.117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-lowlatency-hwe-20.04 | <5.15.0.117.127~20.04.1 | 5.15.0.117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-oem-20.04 | <5.15.0.117.127~20.04.1 | 5.15.0.117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-oem-20.04b | <5.15.0.117.127~20.04.1 | 5.15.0.117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-oem-20.04c | <5.15.0.117.127~20.04.1 | 5.15.0.117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-virtual-hwe-20.04 | <5.15.0.117.127~20.04.1 | 5.15.0.117.127~20.04.1 |
| Ubuntu Ubuntu | =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2024-27017
- https://ubuntu.com/security/CVE-2024-26952
- https://ubuntu.com/security/CVE-2024-25742
- https://ubuntu.com/security/CVE-2024-26886
- https://ubuntu.com/security/CVE-2023-52752
- https://ubuntu.com/security/CVE-2024-36016
- https://ubuntu.com/security/notices/USN-6893-1
- https://ubuntu.com/security/notices/USN-6893-2
- https://ubuntu.com/security/notices/USN-6893-3
- https://ubuntu.com/security/notices/USN-6918-1
- https://ubuntu.com/security/notices/USN-6927-1
- https://ubuntu.com/security/notices/USN-6923-2
- https://ubuntu.com/security/notices/USN-6957-1
- https://ubuntu.com/security/notices/USN-6956-1
- https://ubuntu.com/security/notices/USN-7019-1
- https://ubuntu.com/security/notices/USN-6816-1
- https://ubuntu.com/security/notices/USN-6817-1
- https://ubuntu.com/security/notices/USN-6817-2
- https://ubuntu.com/security/notices/USN-6817-3
- https://ubuntu.com/security/notices/USN-6878-1
- https://ubuntu.com/security/notices/USN-6921-1
- https://ubuntu.com/security/notices/USN-6921-2
- https://ubuntu.com/security/notices/USN-6952-1
- https://ubuntu.com/security/notices/USN-6926-1
- https://ubuntu.com/security/notices/USN-6938-1
- https://ubuntu.com/security/notices/USN-6926-2
- https://ubuntu.com/security/notices/USN-6953-1
- https://ubuntu.com/security/notices/USN-6951-1
- https://ubuntu.com/security/notices/USN-6926-3
- https://ubuntu.com/security/notices/USN-6951-2
- https://ubuntu.com/security/notices/USN-6951-3
- https://ubuntu.com/security/notices/USN-6951-4
- https://ubuntu.com/security/notices/USN-6979-1
- https://ubuntu.com/security/notices/USN-6924-1
- https://ubuntu.com/security/notices/USN-6924-2
- https://ubuntu.com/security/notices/LSN-0106-1
- https://launchpad.net/ubuntu/+source/linux-signed-gkeop/5.15.0-1049.56
- https://launchpad.net/ubuntu/+source/linux-signed-intel-iotg/5.15.0-1061.67
- https://launchpad.net/ubuntu/+source/linux-signed-nvidia/5.15.0-1061.62
- https://launchpad.net/ubuntu/+source/linux-signed-gke/5.15.0-1063.69
- https://launchpad.net/ubuntu/+source/linux-signed-kvm/5.15.0-1063.68
- https://launchpad.net/ubuntu/+source/linux-signed-oracle/5.15.0-1064.70
- https://launchpad.net/ubuntu/+source/linux-signed-gcp/5.15.0-1065.73
- https://launchpad.net/ubuntu/+source/linux-signed-aws/5.15.0-1066.72
- https://launchpad.net/ubuntu/+source/linux-signed/5.15.0-117.127
- https://launchpad.net/ubuntu/+source/linux/5.15.0-117.127
- https://launchpad.net/ubuntu/+source/linux-signed-lowlatency/5.15.0-117.127
- https://launchpad.net/ubuntu/+source/linux-meta-aws/5.15.0.1066.66
- https://launchpad.net/ubuntu/+source/linux-meta-gcp/5.15.0.1065.61
- https://launchpad.net/ubuntu/+source/linux-meta/5.15.0.117.117
- https://launchpad.net/ubuntu/+source/linux-meta-gke/5.15.0.1063.62
- https://launchpad.net/ubuntu/+source/linux-meta-gkeop/5.15.0.1049.48
- https://launchpad.net/ubuntu/+source/linux-meta-intel-iotg/5.15.0.1061.61
- https://launchpad.net/ubuntu/+source/linux-meta-kvm/5.15.0.1063.59
- https://launchpad.net/ubuntu/+source/linux-meta-lowlatency/5.15.0.117.107
- https://launchpad.net/ubuntu/+source/linux-meta-nvidia/5.15.0.1061.61
- https://launchpad.net/ubuntu/+source/linux-meta-oracle/5.15.0.1064.60
- https://launchpad.net/ubuntu/+source/linux-signed-gkeop-5.15/5.15.0-1049.56~20.04.1
- https://launchpad.net/ubuntu/+source/linux-signed-intel-iotg-5.15/5.15.0-1061.67~20.04.1
- https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.15/5.15.0-117.127~20.04.1
- https://launchpad.net/ubuntu/+source/linux-hwe-5.15/5.15.0-117.127~20.04.1
- https://launchpad.net/ubuntu/+source/linux-signed-lowlatency-hwe-5.15/5.15.0-117.127~20.04.1
- https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.15/5.15.0.117.127~20.04.1
- https://launchpad.net/ubuntu/+source/linux-meta-gkeop-5.15/5.15.0.1049.56~20.04.1
- https://launchpad.net/ubuntu/+source/linux-meta-intel-iotg-5.15/5.15.0.1061.67~20.04.1
- https://launchpad.net/ubuntu/+source/linux-meta-lowlatency-hwe-5.15/5.15.0.117.127~20.04.1
- https://ubuntu.com/security/notices/USN-6923-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
- agent/last-modified-date
- agent/severity
- agent/title
- agent/softwarecombine
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- agent/references
- agent/tags
- collector/usn
- source/Ubuntu
- anchor-related/USN-6893-1
- anchor-related/USN-6893-2
- anchor-related/USN-6893-3
- anchor-related/USN-6918-1
- anchor-related/USN-6927-1
- anchor-related/USN-6923-2
- anchor-related/USN-6957-1
- anchor-related/USN-6956-1
- anchor-related/USN-7019-1
- anchor-related/USN-6816-1
- anchor-related/USN-6817-1
- anchor-related/USN-6817-2
- anchor-related/USN-6817-3
- anchor-related/USN-6878-1
- anchor-related/USN-6921-1
- anchor-related/USN-6921-2
- anchor-related/USN-6952-1
- anchor-related/USN-6926-1
- anchor-related/USN-6938-1
- anchor-related/USN-6926-2
- anchor-related/USN-6953-1
- anchor-related/USN-6951-1
- anchor-related/USN-6926-3
- anchor-related/USN-6951-2
- anchor-related/USN-6951-3
- anchor-related/USN-6951-4
- anchor-related/USN-6979-1
- anchor-related/USN-6924-1
- anchor-related/USN-6924-2
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/22.04
- version/ubuntu ubuntu/20.04