USN-6972-3: Linux kernel (Azure) vulnerabilities
Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099) It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A privileged local attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-24860) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What are the potential impacts of USN-6972-3?
USN-6972-3 can lead to a denial of service due to a NULL pointer dereference in the Bluetooth RFCOMM protocol driver.
Which systems are affected by USN-6972-3?
USN-6972-3 affects Ubuntu versions 14.04, 16.04, and 18.04 with specific kernel versions.
How do I fix USN-6972-3?
To fix USN-6972-3, update your system to the recommended kernel versions provided in the advisory.
What is the CVE associated with USN-6972-3?
The CVE associated with USN-6972-3 is CVE-2024-22099.
Is there a workaround for USN-6972-3 until a fix is applied?
Currently, there are no specific workarounds available for USN-6972-3; applying the update is recommended.