USN-7089-7: Linux kernel (Low Latency) vulnerabilities
Published Nov 19, 2024
·Updated
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
20 affected componentsFixes available
All of the following
ubuntu/linux-image-6.8.0-48-lowlatency<6.8.0-48.48.3
6.8.0-48.48.3
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-6.8.0-48-lowlatency-64k<6.8.0-48.48.3
6.8.0-48.48.3
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-lowlatency<6.8.0-48.48.3
6.8.0-48.48.3
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-lowlatency-64k<6.8.0-48.48.3
6.8.0-48.48.3
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-lowlatency-64k-hwe-24.04<6.8.0-48.48.3
6.8.0-48.48.3
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-lowlatency-hwe-24.04<6.8.0-48.48.3
6.8.0-48.48.3
Ubuntu Ubuntu=24.04
All of the following
ubuntu/linux-image-6.8.0-48-lowlatency<6.8.0-48.48.3~22.04.1
6.8.0-48.48.3~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-6.8.0-48-lowlatency-64k<6.8.0-48.48.3~22.04.1
6.8.0-48.48.3~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-lowlatency-64k-hwe-22.04<6.8.0-48.48.3~22.04.1
6.8.0-48.48.3~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-lowlatency-hwe-22.04<6.8.0-48.48.3~22.04.1
6.8.0-48.48.3~22.04.1
Ubuntu Ubuntu=22.04
Event History
Nov 19, 2024
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.
- CVE-2023-52888
- CVE-2024-42097
- CVE-2024-42146
- CVE-2024-42236
- CVE-2024-42244
- CVE-2024-41095
- CVE-2024-42155
- CVE-2024-41073
- CVE-2024-41084
- CVE-2023-52887
- CVE-2024-42156
- CVE-2024-41036
- CVE-2024-41076
- CVE-2024-42131
- CVE-2024-42103
- CVE-2024-42126
- CVE-2024-42248
- CVE-2024-42095
- CVE-2024-42115
- CVE-2024-42253
- CVE-2024-41041
- CVE-2024-42102
- CVE-2024-41077
- CVE-2024-42070
- CVE-2024-41097
- CVE-2024-41054
- CVE-2024-41018
- CVE-2024-41045
- CVE-2024-41019
- CVE-2024-41092
- CVE-2024-42251
- CVE-2024-42093
- CVE-2024-41007
- CVE-2024-42132
- CVE-2024-42161
- CVE-2024-41078
- CVE-2024-41021
- CVE-2024-41020
- CVE-2024-42158
- CVE-2024-42238
- CVE-2024-42091
- CVE-2024-42113
- CVE-2024-42147
- CVE-2024-41071
- CVE-2024-42227
- CVE-2024-42141
- CVE-2024-42280
- CVE-2024-41042
- CVE-2024-42064
- CVE-2024-42149
- CVE-2024-42092
- CVE-2024-42096
- CVE-2024-42130
- CVE-2024-42152
- CVE-2024-41048
- CVE-2024-42080
- CVE-2024-42229
- CVE-2024-41093
- CVE-2024-42150
- CVE-2024-42151
- CVE-2024-42082
- CVE-2024-41030
- CVE-2024-39486
- CVE-2024-42128
- CVE-2024-42223
- CVE-2024-41060
- CVE-2024-42087
- CVE-2024-41057
- CVE-2024-42090
- CVE-2024-42118
- CVE-2024-42231
- CVE-2024-41069
- CVE-2024-41080
- CVE-2024-42065
- CVE-2024-42117
- CVE-2024-42133
- CVE-2024-42129
- CVE-2024-42247
- CVE-2024-41089
- CVE-2024-41049
- CVE-2024-41079
- CVE-2024-42089
- CVE-2024-42112
- CVE-2024-42119
- CVE-2024-42098
- CVE-2024-42230
- CVE-2024-42111
- CVE-2024-42101
- CVE-2024-42108
- CVE-2024-41066
- CVE-2024-41025
- CVE-2024-41062
- CVE-2024-42094
- CVE-2024-41082
- CVE-2024-42246
- CVE-2024-42271
- CVE-2024-41098
- CVE-2024-42140
- CVE-2024-42121
- CVE-2024-41052
- CVE-2024-42127
- CVE-2024-42250
- CVE-2024-42137
- CVE-2024-41096
- CVE-2024-41081
- CVE-2024-41050
- CVE-2024-42084
- CVE-2024-41083
- CVE-2024-42068
- CVE-2024-41029
- CVE-2024-42076
- CVE-2024-42109
- CVE-2024-42153
- CVE-2024-41094
- CVE-2024-41063
- CVE-2024-42088
- CVE-2024-42243
- CVE-2024-41017
- CVE-2024-41047
- CVE-2024-41087
- CVE-2024-41023
- CVE-2024-42232
- CVE-2024-41086
- CVE-2024-42077
- CVE-2024-41067
- CVE-2024-41065
- CVE-2024-42157
- CVE-2024-41051
- CVE-2024-41056
- CVE-2024-41061
- CVE-2024-42239
- CVE-2024-41039
- CVE-2024-42066
- CVE-2024-42120
- CVE-2024-41012
- CVE-2024-39487
- CVE-2024-42135
- CVE-2024-42138
- CVE-2024-41058
- CVE-2024-42074
- CVE-2024-42100
- CVE-2024-41072
- CVE-2024-42085
- CVE-2024-42145
- CVE-2024-42136
- CVE-2024-42069
- CVE-2024-42067
- CVE-2024-42235
- CVE-2024-41027
- CVE-2024-43855
- CVE-2024-42079
- CVE-2024-42106
- CVE-2024-41064
- CVE-2024-41035
- CVE-2024-42110
- CVE-2024-41022
- CVE-2024-42241
- CVE-2024-41070
- CVE-2024-41010
- CVE-2024-41090
- CVE-2024-42240
- CVE-2024-41088
- CVE-2024-41075
- CVE-2024-42124
- CVE-2024-42245
- CVE-2024-43858
- CVE-2024-41038
- CVE-2024-41046
- CVE-2024-41033
- CVE-2024-42144
- CVE-2024-42234
- CVE-2024-41037
- CVE-2024-25741
- CVE-2024-42105
- CVE-2024-42073
- CVE-2024-41068
- CVE-2024-41074
- CVE-2024-42252
- CVE-2024-41032
- CVE-2024-41015
- CVE-2024-42104
- CVE-2024-41028
- CVE-2024-41053
- CVE-2024-41091
- CVE-2024-41034
- CVE-2024-41031
- CVE-2024-42237
- CVE-2024-42114
- CVE-2024-42225
- CVE-2024-42086
- CVE-2024-41044
- CVE-2024-41085
- CVE-2024-41059
- CVE-2024-41055
- CVE-2024-42063
- CVE-2024-42142
Frequently Asked Questions
1
What is the severity of USN-7089-7?
The severity of USN-7089-7 is classified as high, as it can lead to denial of service.
2
How do I fix USN-7089-7?
To fix USN-7089-7, update your system to the latest Ubuntu kernel version 6.8.0-48.48.3 or higher.
3
Who is affected by USN-7089-7?
Users running specific versions of the Linux kernel on Ubuntu 22.04 and 24.04 are affected by USN-7089-7.
4
What vulnerability does USN-7089-7 address?
USN-7089-7 addresses a vulnerability discovered by Chenyuan Yang in the USB Gadget subsystem that can cause denial of service.
5
When was USN-7089-7 released?
USN-7089-7 was released to address security issues in the Linux kernel on the date specified in the advisory.