USN-7089-3: Linux kernel vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1015-oracleto a version that resolves this vulnerability.Fixed in 6.8.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1015-oracle-64kto a version that resolves this vulnerability.Fixed in 6.8.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1018-awsto a version that resolves this vulnerability.Fixed in 6.8.0-1018.20 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 6.8.0-1018.20 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 6.8.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-image-oracle-64kto a version that resolves this vulnerability.Fixed in 6.8.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1015-oracleto a version that resolves this vulnerability.Fixed in 6.8.0-1015.15~22.04.1 - Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1015-oracle-64kto a version that resolves this vulnerability.Fixed in 6.8.0-1015.15~22.04.1 - Upgrade
Upgrade
ubuntu/linux-image-6.8.0-1018-awsto a version that resolves this vulnerability.Fixed in 6.8.0-1018.19~22.04.1 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 6.8.0-1018.19~22.04.1 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 6.8.0-1015.15~22.04.1 - Upgrade
Upgrade
ubuntu/linux-image-oracle-64kto a version that resolves this vulnerability.Fixed in 6.8.0-1015.15~22.04.1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch USN-7089-3
Event History
Frequently Asked Questions
What is the severity of USN-7089-3?
The severity of USN-7089-3 is related to a denial of service vulnerability in the USB Gadget subsystem of the Linux kernel.
How do I fix USN-7089-3?
To fix USN-7089-3, upgrade to the patched version of the Linux kernel image, specifically to version 6.8.0-1015.16 or higher.
What systems are affected by USN-7089-3?
USN-7089-3 affects Ubuntu 24.04 systems that use specific versions of the Linux kernel images listed in the advisory.
Who discovered the vulnerability in USN-7089-3?
The vulnerability in USN-7089-3 was discovered by Chenyuan Yang.
Is a local attacker required for exploiting USN-7089-3?
Yes, a local attacker could exploit USN-7089-3 to cause a denial of service.