USN-6973-2: Linux kernel (Azure) vulnerabilities
It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A privileged local attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-24860) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6973-2?
The severity of USN-6973-2 is high due to the potential for a denial of service from a privileged local attacker.
How do I fix USN-6973-2?
To fix USN-6973-2, update to the recommended Linux kernel version 5.4.0-1136.143~18.04.1.
Who is affected by USN-6973-2?
USN-6973-2 affects Ubuntu 18.04 users running specific versions of the Linux kernel.
What does the vulnerability in USN-6973-2 allow an attacker to do?
The vulnerability in USN-6973-2 allows an attacker to potentially cause a denial of service by exploiting a race condition in the Bluetooth subsystem.
Is there an alternative solution for USN-6973-2 besides updating?
Currently, the primary solution for USN-6973-2 is to apply the update; there are no alternative mitigations recommended.