USN-7089-2: Linux kernel vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1014-ibmto a version that resolves this vulnerability.Fixed in 6.8.0-1014.14 - Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1016-azureto a version that resolves this vulnerability.Fixed in 6.8.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1016-azure-fdeto a version that resolves this vulnerability.Fixed in 6.8.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1016-gcpto a version that resolves this vulnerability.Fixed in 6.8.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 6.8.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-image-azure-fdeto a version that resolves this vulnerability.Fixed in 6.8.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 6.8.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-image-ibmto a version that resolves this vulnerability.Fixed in 6.8.0-1014.14 - Upgrade
Upgrade
ubuntu/linux-image-ibm-classicto a version that resolves this vulnerability.Fixed in 6.8.0-1014.14 - Upgrade
Upgrade
ubuntu/linux-image-ibm-lts-24.04to a version that resolves this vulnerability.Fixed in 6.8.0-1014.14 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch USN-7089-2
Event History
Frequently Asked Questions
What is the severity of USN-7089-2?
The severity of USN-7089-2 is considered to be critical due to potential denial of service caused by improper checks in the USB Gadget subsystem.
How do I fix USN-7089-2?
To fix USN-7089-2, update your system to versions 6.8.0-1014.14 or 6.8.0-1016.18 of the affected packages.
What software is affected by USN-7089-2?
The affected software for USN-7089-2 includes various Linux kernel images for Ubuntu 24.04, such as linux-image-6.8.0-1014-ibm and linux-image-6.8.0-1016-azure.
Who discovered the vulnerability in USN-7089-2?
The vulnerability in USN-7089-2 was discovered by researcher Chenyuan Yang.
Can a local attacker exploit the vulnerability in USN-7089-2?
Yes, a local attacker could potentially exploit the vulnerability in USN-7089-2 to cause a denial of service.