- Vulnerability/
- USN-6923-2
30/7/2024
USN-6923-2: Linux kernel vulnerabilities
First published: Tue Jul 30 2024(Updated: )
Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-5.15.0-1059-ibm | <5.15.0-1059.62 | 5.15.0-1059.62 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-1059-raspi | <5.15.0-1059.62 | 5.15.0-1059.62 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-ibm | <5.15.0.1059.55 | 5.15.0.1059.55 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-raspi | <5.15.0.1059.57 | 5.15.0.1059.57 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-raspi-nolpae | <5.15.0.1059.57 | 5.15.0.1059.57 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-1059-ibm | <5.15.0-1059.62~20.04.1 | 5.15.0-1059.62~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-1066-aws | <5.15.0-1066.72~20.04.1 | 5.15.0-1066.72~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-aws | <5.15.0.1066.72~20.04.1 | 5.15.0.1066.72~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-ibm | <5.15.0.1059.62~20.04.1 | 5.15.0.1059.62~20.04.1 |
| =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2024-27017
- https://ubuntu.com/security/CVE-2024-26952
- https://ubuntu.com/security/CVE-2024-25742
- https://ubuntu.com/security/CVE-2024-26886
- https://ubuntu.com/security/CVE-2023-52752
- https://ubuntu.com/security/CVE-2024-36016
- https://ubuntu.com/security/notices/USN-6893-1
- https://ubuntu.com/security/notices/USN-6893-2
- https://ubuntu.com/security/notices/USN-6893-3
- https://ubuntu.com/security/notices/USN-6918-1
- https://ubuntu.com/security/notices/USN-6923-1
- https://ubuntu.com/security/notices/USN-6927-1
- https://ubuntu.com/security/notices/USN-6957-1
- https://ubuntu.com/security/notices/USN-6956-1
- https://ubuntu.com/security/notices/USN-7019-1
- https://ubuntu.com/security/notices/USN-6816-1
- https://ubuntu.com/security/notices/USN-6817-1
- https://ubuntu.com/security/notices/USN-6817-2
- https://ubuntu.com/security/notices/USN-6817-3
- https://ubuntu.com/security/notices/USN-6878-1
- https://ubuntu.com/security/notices/USN-6921-1
- https://ubuntu.com/security/notices/USN-6921-2
- https://ubuntu.com/security/notices/USN-6952-1
- https://ubuntu.com/security/notices/USN-6926-1
- https://ubuntu.com/security/notices/USN-6938-1
- https://ubuntu.com/security/notices/USN-6926-2
- https://ubuntu.com/security/notices/USN-6953-1
- https://ubuntu.com/security/notices/USN-6951-1
- https://ubuntu.com/security/notices/USN-6926-3
- https://ubuntu.com/security/notices/USN-6951-2
- https://ubuntu.com/security/notices/USN-6951-3
- https://ubuntu.com/security/notices/USN-6951-4
- https://ubuntu.com/security/notices/USN-6979-1
- https://ubuntu.com/security/notices/USN-6924-1
- https://ubuntu.com/security/notices/USN-6924-2
- https://ubuntu.com/security/notices/LSN-0106-1
- https://launchpad.net/ubuntu/+source/linux-signed-ibm/5.15.0-1059.62
- https://launchpad.net/ubuntu/+source/linux-raspi/5.15.0-1059.62
- https://launchpad.net/ubuntu/+source/linux-meta-ibm/5.15.0.1059.55
- https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.15.0.1059.57
- https://launchpad.net/ubuntu/+source/linux-signed-ibm-5.15/5.15.0-1059.62~20.04.1
- https://launchpad.net/ubuntu/+source/linux-signed-aws-5.15/5.15.0-1066.72~20.04.1
- https://launchpad.net/ubuntu/+source/linux-meta-aws-5.15/5.15.0.1066.72~20.04.1
- https://launchpad.net/ubuntu/+source/linux-meta-ibm-5.15/5.15.0.1059.62~20.04.1
- https://ubuntu.com/security/notices/USN-6923-2 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
- agent/last-modified-date
- agent/title
- agent/severity
- agent/type
- agent/first-publish-date
- agent/description
- agent/references
- agent/softwarecombine
- agent/event
- agent/tags
- agent/trending
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/22.04
- version/ubuntu ubuntu/20.04