USN-7089-1: Linux kernel vulnerabilities
Published Nov 1, 2024
·Updated
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
48 affected componentsFixes available
All of the following
ubuntu/linux-image-6.8.0-48-generic<6.8.0-48.48
6.8.0-48.48
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-6.8.0-48-generic-64k<6.8.0-48.48
6.8.0-48.48
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-generic<6.8.0-48.48
6.8.0-48.48
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-generic-64k<6.8.0-48.48
6.8.0-48.48
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-generic-64k-hwe-24.04<6.8.0-48.48
6.8.0-48.48
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-generic-hwe-24.04<6.8.0-48.48
6.8.0-48.48
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-generic-lpae<6.8.0-48.48
6.8.0-48.48
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-kvm<6.8.0-48.48
6.8.0-48.48
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-virtual<6.8.0-48.48
6.8.0-48.48
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-virtual-hwe-24.04<6.8.0-48.48
6.8.0-48.48
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-6.8.0-1017-azure<6.8.0-1017.20~22.04.1
6.8.0-1017.20~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-6.8.0-1017-azure-fde<6.8.0-1017.20~22.04.1
6.8.0-1017.20~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-6.8.0-1017-gcp<6.8.0-1017.19~22.04.1
6.8.0-1017.19~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-6.8.0-48-generic<6.8.0-48.48~22.04.1
6.8.0-48.48~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-6.8.0-48-generic-64k<6.8.0-48.48~22.04.1
6.8.0-48.48~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-azure<6.8.0-1017.20~22.04.1
6.8.0-1017.20~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-azure-fde<6.8.0-1017.20~22.04.1
6.8.0-1017.20~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-gcp<6.8.0-1017.19~22.04.1
6.8.0-1017.19~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-generic-64k-hwe-22.04<6.8.0-48.48~22.04.1
6.8.0-48.48~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-generic-hwe-22.04<6.8.0-48.48~22.04.1
6.8.0-48.48~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-oem-22.04<6.8.0-48.48~22.04.1
6.8.0-48.48~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-oem-22.04a<6.8.0-48.48~22.04.1
6.8.0-48.48~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-oem-22.04c<6.8.0-48.48~22.04.1
6.8.0-48.48~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-virtual-hwe-22.04<6.8.0-48.48~22.04.1
6.8.0-48.48~22.04.1
Ubuntu Ubuntu=22.04
Event History
Nov 1, 2024
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.
- CVE-2024-42136
- CVE-2024-42114
- CVE-2024-42146
- CVE-2024-41020
- CVE-2024-42117
- CVE-2024-41062
- CVE-2024-41081
- CVE-2024-42106
- CVE-2024-42161
- CVE-2024-41095
- CVE-2024-42064
- CVE-2024-43855
- CVE-2024-42236
- CVE-2024-42095
- CVE-2024-42225
- CVE-2024-42130
- CVE-2024-41092
- CVE-2024-42250
- CVE-2024-42093
- CVE-2024-42231
- CVE-2024-41035
- CVE-2024-42150
- CVE-2024-42112
- CVE-2024-42068
- CVE-2024-41021
- CVE-2024-42144
- CVE-2024-42113
- CVE-2024-42147
- CVE-2024-42240
- CVE-2024-42246
- CVE-2024-42131
- CVE-2024-42157
- CVE-2024-43858
- CVE-2024-42241
- CVE-2024-41023
- CVE-2024-42151
- CVE-2024-42248
- CVE-2023-52888
- CVE-2024-41019
- CVE-2024-41038
- CVE-2024-42152
- CVE-2024-42101
- CVE-2024-41066
- CVE-2024-41067
- CVE-2024-42087
- CVE-2024-41036
- CVE-2024-42126
- CVE-2024-41074
- CVE-2024-42251
- CVE-2024-42086
- CVE-2024-41047
- CVE-2024-42091
- CVE-2024-41098
- CVE-2024-41051
- CVE-2024-42065
- CVE-2024-42090
- CVE-2024-42092
- CVE-2024-42098
- CVE-2024-41087
- CVE-2024-41078
- CVE-2024-41053
- CVE-2024-42140
- CVE-2024-42243
- CVE-2024-41079
- CVE-2024-41093
- CVE-2024-42069
- CVE-2024-41041
- CVE-2024-41027
- CVE-2024-42145
- CVE-2024-41042
- CVE-2024-42119
- CVE-2024-42247
- CVE-2024-41059
- CVE-2024-41056
- CVE-2024-41068
- CVE-2024-41082
- CVE-2024-42128
- CVE-2024-41063
- CVE-2024-42067
- CVE-2024-41096
- CVE-2024-41086
- CVE-2024-42089
- CVE-2024-42097
- CVE-2024-41031
- CVE-2024-41083
- CVE-2024-42108
- CVE-2024-41070
- CVE-2024-42158
- CVE-2024-25741
- CVE-2024-42135
- CVE-2024-41089
- CVE-2024-42280
- CVE-2024-41033
- CVE-2024-41085
- CVE-2024-41075
- CVE-2023-52887
- CVE-2024-42153
- CVE-2024-41010
- CVE-2024-42085
- CVE-2024-42074
- CVE-2024-41025
- CVE-2024-42155
- CVE-2024-41012
- CVE-2024-41046
- CVE-2024-42120
- CVE-2024-42244
- CVE-2024-41037
- CVE-2024-42129
- CVE-2024-42237
- CVE-2024-41015
- CVE-2024-42245
- CVE-2024-39486
- CVE-2024-42141
- CVE-2024-41018
- CVE-2024-41091
- CVE-2024-42105
- CVE-2024-41076
- CVE-2024-42096
- CVE-2024-41071
- CVE-2024-42104
- CVE-2024-42080
- CVE-2024-41022
- CVE-2024-41032
- CVE-2024-42111
- CVE-2024-42127
- CVE-2024-42238
- CVE-2024-42156
- CVE-2024-42124
- CVE-2024-42118
- CVE-2024-41090
- CVE-2024-41060
- CVE-2024-42070
- CVE-2024-42253
- CVE-2024-41054
- CVE-2024-42088
- CVE-2024-39487
- CVE-2024-42100
- CVE-2024-42076
- CVE-2024-42271
- CVE-2024-41049
- CVE-2024-42082
- CVE-2024-41064
- CVE-2024-41097
- CVE-2024-42073
- CVE-2024-41057
- CVE-2024-41094
- CVE-2024-42063
- CVE-2024-42138
- CVE-2024-42235
- CVE-2024-42252
- CVE-2024-41077
- CVE-2024-41080
- CVE-2024-41058
- CVE-2024-41030
- CVE-2024-42149
- CVE-2024-42234
- CVE-2024-41061
- CVE-2024-42142
- CVE-2024-42223
- CVE-2024-42239
- CVE-2024-42227
- CVE-2024-41029
- CVE-2024-41017
- CVE-2024-42084
- CVE-2024-42109
- CVE-2024-42115
- CVE-2024-41084
- CVE-2024-41065
- CVE-2024-41034
- CVE-2024-41055
- CVE-2024-41050
- CVE-2024-42077
- CVE-2024-42103
- CVE-2024-41007
- CVE-2024-42121
- CVE-2024-42137
- CVE-2024-41052
- CVE-2024-42132
- CVE-2024-41072
- CVE-2024-42232
- CVE-2024-41044
- CVE-2024-41048
- CVE-2024-42133
- CVE-2024-41069
- CVE-2024-41073
- CVE-2024-42230
- CVE-2024-42110
- CVE-2024-42079
- CVE-2024-41028
- CVE-2024-42229
- CVE-2024-41045
- CVE-2024-41088
- CVE-2024-42066
- CVE-2024-42094
- CVE-2024-42102
- CVE-2024-41039
Frequently Asked Questions
1
What is the severity of USN-7089-1?
USN-7089-1 addresses a local denial-of-service vulnerability in the USB Gadget subsystem of the Linux kernel.
2
How do I fix USN-7089-1?
To fix USN-7089-1, update your system to the recommended package version 6.8.0-48.48 or later.
3
What versions of Ubuntu are affected by USN-7089-1?
USN-7089-1 affects Ubuntu 24.04 and Ubuntu 22.04 users with specific packages outlined in the advisory.
4
What are the potential impacts of USN-7089-1?
The vulnerability could be exploited by local attackers to cause a denial of service on affected systems.
5
Who discovered the issue leading to USN-7089-1?
Chenyuan Yang discovered the vulnerability in the USB Gadget subsystem of the Linux kernel.