USN-6923-2: Linux kernel vulnerabilities
Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1059-ibmto a version that resolves this vulnerability.Fixed in 5.15.0-1059.62 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1059-raspito a version that resolves this vulnerability.Fixed in 5.15.0-1059.62 - Upgrade
Upgrade
ubuntu/linux-image-ibmto a version that resolves this vulnerability.Fixed in 5.15.0.1059.55 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 5.15.0.1059.57 - Upgrade
Upgrade
ubuntu/linux-image-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.15.0.1059.57 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1059-ibmto a version that resolves this vulnerability.Fixed in 5.15.0-1059.62~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1066-awsto a version that resolves this vulnerability.Fixed in 5.15.0-1066.72~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.15.0.1066.72~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-ibmto a version that resolves this vulnerability.Fixed in 5.15.0.1059.62~20.04.1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6923-2?
USN-6923-2 is considered a high severity vulnerability due to its potential to allow local attackers to compromise system security.
How do I fix USN-6923-2?
To fix USN-6923-2, upgrade your Linux kernel image to the versions 5.15.0-1059.62 or newer if you are using Ubuntu 22.04.
Who is affected by USN-6923-2?
Anyone running specific versions of Ubuntu 20.04 or 22.04 with particular Linux kernel images are affected by USN-6923-2.
What causes USN-6923-2?
USN-6923-2 is caused by an untrusted hypervisor potentially injecting malicious VC interrupts that can undermine security guarantees.
Is there a patch for USN-6923-2?
Yes, a patch has been released that requires upgrading to a secure kernel image version as specified in the vulnerability notice.