USN-7100-1: Linux kernel vulnerabilities

Published Nov 11, 2024
·
Updated

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - User-Mode Linux (UML); - x86 architecture; - Block layer subsystem; - Android drivers; - Serial ATA and Parallel ATA drivers; - ATM drivers; - Drivers core; - Null block device driver; - Character device driver; - ARM SCMI message protocol; - GPU drivers; - HID subsystem; - Hardware monitoring drivers; - I3C subsystem; - InfiniBand drivers; - Input Device core drivers; - Input Device (Miscellaneous) drivers; - IOMMU subsystem; - IRQ chip drivers; - ISDN/mISDN subsystem; - LED subsystem; - Multiple devices driver; - Media drivers; - VMware VMCI Driver; - MMC subsystem; - Network drivers; - Near Field Communication (NFC) drivers; - NVME drivers; - Device tree and open firmware driver; - Parport drivers; - PCI subsystem; - Pin controllers subsystem; - Remote Processor subsystem; - S/390 drivers; - SCSI drivers; - QCOM SoC drivers; - Direct Digital Synthesis drivers; - Thunderbolt and USB4 drivers; - TTY drivers; - Userspace I/O drivers; - DesignWare USB3 driver; - USB Gadget drivers; - USB Host Controller drivers; - USB Type-C Connector System Software Interface driver; - USB over IP driver; - VHOST drivers; - File systems infrastructure; - BTRFS file system; - Ext4 file system; - F2FS file system; - JFS file system; - NILFS2 file system; - NTFS3 file system; - Proc file system; - SMB network file system; - Core kernel; - DMA mapping infrastructure; - RCU subsystem; - Tracing infrastructure; - Radix Tree data structure library; - Kernel userspace event delivery library; - Objagg library; - Memory management; - Amateur Radio drivers; - Bluetooth subsystem; - Ethernet bridge; - CAN network layer; - Networking core; - Ethtool driver; - IPv4 networking; - IPv6 networking; - IUCV driver; - KCM (Kernel Connection Multiplexor) sockets driver; - MAC80211 subsystem; - Multipath TCP; - Netfilter; - Network traffic control; - SCTP protocol; - Sun RPC protocol; - TIPC protocol; - TLS protocol; - Wireless networking; - AppArmor security module; - Landlock security; - Simplified Mandatory Access Control Kernel framework; - FireWire sound drivers; - SoC audio core drivers; - USB sound devices; (CVE-2024-43817, CVE-2024-42304, CVE-2024-46756, CVE-2024-42318, CVE-2024-41090, CVE-2024-41063, CVE-2024-44987, CVE-2024-46844, CVE-2024-46677, CVE-2024-44988, CVE-2024-42297, CVE-2024-26893, CVE-2024-46673, CVE-2024-26800, CVE-2024-42305, CVE-2024-46731, CVE-2024-41091, CVE-2024-46810, CVE-2024-41072, CVE-2022-48666, CVE-2024-38602, CVE-2024-46780, CVE-2024-46750, CVE-2024-43858, CVE-2024-41020, CVE-2024-46755, CVE-2024-46829, CVE-2024-41068, CVE-2024-45003, CVE-2024-42280, CVE-2024-42283, CVE-2024-43873, CVE-2024-46746, CVE-2024-44969, CVE-2024-46807, CVE-2024-41081, CVE-2024-44971, CVE-2024-26607, CVE-2024-43880, CVE-2024-42281, CVE-2024-42274, CVE-2024-43908, CVE-2024-42267, CVE-2024-47665, CVE-2024-45011, CVE-2024-46707, CVE-2024-42310, CVE-2024-42309, CVE-2024-44965, CVE-2024-46747, CVE-2024-42259, CVE-2024-46804, CVE-2024-46679, CVE-2024-45007, CVE-2024-45009, CVE-2024-46771, CVE-2024-46739, CVE-2024-41060, CVE-2024-46676, CVE-2024-46822, CVE-2024-42272, CVE-2024-41059, CVE-2024-43839, CVE-2024-46817, CVE-2024-47669, CVE-2024-44999, CVE-2024-42285, CVE-2024-44986, CVE-2024-43828, CVE-2024-43879, CVE-2024-44998, CVE-2024-46724, CVE-2024-41015, CVE-2024-45025, CVE-2024-43849, CVE-2024-46818, CVE-2024-43830, CVE-2024-46725, CVE-2024-43834, CVE-2024-42302, CVE-2024-36484, CVE-2024-43853, CVE-2024-46782, CVE-2024-46740, CVE-2024-46732, CVE-2024-43869, CVE-2024-42312, CVE-2024-42292, CVE-2024-43884, CVE-2024-44934, CVE-2024-44995, CVE-2024-43894, CVE-2024-46675, CVE-2024-43870, CVE-2024-44990, CVE-2024-42287, CVE-2024-41065, CVE-2024-42301, CVE-2024-42290, CVE-2024-46702, CVE-2024-46719, CVE-2024-46745, CVE-2024-46758, CVE-2024-46757, CVE-2024-44935, CVE-2024-42276, CVE-2024-43890, CVE-2023-52918, CVE-2024-41077, CVE-2024-43905, CVE-2024-38611, CVE-2024-42269, CVE-2024-42284, CVE-2024-41073, CVE-2024-46722, CVE-2024-41017, CVE-2024-47667, CVE-2024-45021, CVE-2024-43867, CVE-2024-41098, CVE-2024-43909, CVE-2024-46723, CVE-2024-45026, CVE-2024-42114, CVE-2024-44944, CVE-2024-43835, CVE-2024-44982, CVE-2024-43907, CVE-2024-46828, CVE-2024-43856, CVE-2024-46832, CVE-2024-44954, CVE-2024-43846, CVE-2024-41070, CVE-2024-43892, CVE-2024-44985, CVE-2024-42306, CVE-2024-43889, CVE-2024-44958, CVE-2024-46798, CVE-2024-44989, CVE-2024-42313, CVE-2024-46737, CVE-2024-42289, CVE-2024-43829, CVE-2024-46744, CVE-2023-52889, CVE-2024-46689, CVE-2024-47663, CVE-2024-46791, CVE-2024-43863, CVE-2024-43893, CVE-2024-43841, CVE-2024-46777, CVE-2024-46800, CVE-2024-45028, CVE-2024-44952, CVE-2024-43883, CVE-2024-44946, CVE-2024-43882, CVE-2024-44960, CVE-2024-38577, CVE-2024-46814, CVE-2024-42288, CVE-2024-44947, CVE-2024-41071, CVE-2024-41042, CVE-2024-41064, CVE-2024-42311, CVE-2024-42270, CVE-2024-43861, CVE-2024-46752, CVE-2024-42296, CVE-2024-41022, CVE-2024-42246, CVE-2024-43871, CVE-2024-42265, CVE-2024-43854, CVE-2024-41019, CVE-2024-46815, CVE-2024-46743, CVE-2024-42126, CVE-2024-26661, CVE-2024-41012, CVE-2024-46761, CVE-2024-45008, CVE-2024-46805, CVE-2024-45006, CVE-2024-42295, CVE-2024-46783, CVE-2024-42286, CVE-2024-46714, CVE-2024-42299, CVE-2024-46781, CVE-2024-43914, CVE-2024-44966, CVE-2024-44974, CVE-2024-45018, CVE-2024-46840, CVE-2024-46819, CVE-2024-40915, CVE-2024-46759, CVE-2024-43860, CVE-2024-47668, CVE-2024-39472, CVE-2024-47660, CVE-2024-47659, CVE-2024-46795, CVE-2024-43875, CVE-2024-46738, CVE-2024-42271, CVE-2024-26669, CVE-2024-44983, CVE-2024-41078, CVE-2024-46685, CVE-2024-46713, CVE-2024-46721, CVE-2024-46763, CVE-2024-41011, CVE-2024-43902, CVE-2024-42277, CVE-2024-44948)

Affected Software

135 affected componentsFixes available
Canonical Linux kernel
All of the following
ubuntu/linux-image-5.15.0-1038-xilinx-zynqmp<5.15.0-1038.42
5.15.0-1038.42
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-1055-gkeop<5.15.0-1055.62
5.15.0-1055.62
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-1065-ibm<5.15.0-1065.68
5.15.0-1065.68
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-1065-raspi<5.15.0-1065.68
5.15.0-1065.68
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-1067-nvidia<5.15.0-1067.68
5.15.0-1067.68
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-1067-nvidia-lowlatency<5.15.0-1067.68
5.15.0-1067.68
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-1069-gke<5.15.0-1069.75
5.15.0-1069.75
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-1069-kvm<5.15.0-1069.74
5.15.0-1069.74
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-1070-oracle<5.15.0-1070.76
5.15.0-1070.76
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-1071-gcp<5.15.0-1071.79
5.15.0-1071.79
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-125-generic<5.15.0-125.135
5.15.0-125.135
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-125-generic-64k<5.15.0-125.135
5.15.0-125.135
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-125-generic-lpae<5.15.0-125.135
5.15.0-125.135
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-125-lowlatency<5.15.0-125.135
5.15.0-125.135
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-125-lowlatency-64k<5.15.0-125.135
5.15.0-125.135
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-gcp-lts-22.04<5.15.0.1071.67
5.15.0.1071.67
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-generic<5.15.0.125.124
5.15.0.125.124
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-generic-64k<5.15.0.125.124
5.15.0.125.124
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-generic-lpae<5.15.0.125.124
5.15.0.125.124
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-gke<5.15.0.1069.68
5.15.0.1069.68
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-gke-5.15<5.15.0.1069.68
5.15.0.1069.68
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-gkeop<5.15.0.1055.54
5.15.0.1055.54
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-gkeop-5.15<5.15.0.1055.54
5.15.0.1055.54
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-ibm<5.15.0.1065.61
5.15.0.1065.61
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-kvm<5.15.0.1069.65
5.15.0.1069.65
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-lowlatency<5.15.0.125.113
5.15.0.125.113
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-lowlatency-64k<5.15.0.125.113
5.15.0.125.113
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-nvidia<5.15.0.1067.67
5.15.0.1067.67
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-nvidia-lowlatency<5.15.0.1067.67
5.15.0.1067.67
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-oracle-lts-22.04<5.15.0.1070.66
5.15.0.1070.66
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-raspi<5.15.0.1065.63
5.15.0.1065.63
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-raspi-nolpae<5.15.0.1065.63
5.15.0.1065.63
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-virtual<5.15.0.125.124
5.15.0.125.124
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-xilinx-zynqmp<5.15.0.1038.42
5.15.0.1038.42
Ubuntu Ubuntu=22.04
All of the following
ubuntu/linux-image-5.15.0-1055-gkeop<5.15.0-1055.62~20.04.1
5.15.0-1055.62~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.15.0-1065-ibm<5.15.0-1065.68~20.04.1
5.15.0-1065.68~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.15.0-1070-oracle<5.15.0-1070.76~20.04.1
5.15.0-1070.76~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.15.0-1071-gcp<5.15.0-1071.79~20.04.1
5.15.0-1071.79~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.15.0-1072-aws<5.15.0-1072.78~20.04.1
5.15.0-1072.78~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.15.0-125-generic<5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.15.0-125-generic-64k<5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.15.0-125-generic-lpae<5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.15.0-125-lowlatency<5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-5.15.0-125-lowlatency-64k<5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-aws<5.15.0.1072.78~20.04.1
5.15.0.1072.78~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-gcp<5.15.0.1071.79~20.04.1
5.15.0.1071.79~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-generic-64k-hwe-20.04<5.15.0.125.135~20.04.1
5.15.0.125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-generic-hwe-20.04<5.15.0.125.135~20.04.1
5.15.0.125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-generic-lpae-hwe-20.04<5.15.0.125.135~20.04.1
5.15.0.125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-gkeop-5.15<5.15.0.1055.62~20.04.1
5.15.0.1055.62~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-ibm<5.15.0.1065.68~20.04.1
5.15.0.1065.68~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-lowlatency-64k-hwe-20.04<5.15.0.125.135~20.04.1
5.15.0.125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-lowlatency-hwe-20.04<5.15.0.125.135~20.04.1
5.15.0.125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-oem-20.04<5.15.0.125.135~20.04.1
5.15.0.125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-oem-20.04b<5.15.0.125.135~20.04.1
5.15.0.125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-oem-20.04c<5.15.0.125.135~20.04.1
5.15.0.125.135~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-oracle<5.15.0.1070.76~20.04.1
5.15.0.1070.76~20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/linux-image-virtual-hwe-20.04<5.15.0.125.135~20.04.1
5.15.0.125.135~20.04.1
Ubuntu Ubuntu=20.04
ubuntu/linux-aws-5.15<5.15.0-1072.78~20.04.1
5.15.0-1072.78~20.04.1
ubuntu/linux-gcp-5.15<5.15.0-1071.79~20.04.1
5.15.0-1071.79~20.04.1
ubuntu/linux-gkeop-5.15<5.15.0-1055.62~20.04.1
5.15.0-1055.62~20.04.1
ubuntu/linux-hwe-5.15<5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
ubuntu/linux-ibm-5.15<5.15.0-1065.68~20.04.1
5.15.0-1065.68~20.04.1
ubuntu/linux-lowlatency-hwe-5.15<5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
ubuntu/linux-oracle-5.15<5.15.0-1070.76~20.04.1
5.15.0-1070.76~20.04.1
ubuntu/linux<5.15.0-125.135
5.15.0-125.135
ubuntu/linux-gcp<5.15.0-1071.79
5.15.0-1071.79
ubuntu/linux-gke<5.15.0-1069.75
5.15.0-1069.75
ubuntu/linux-gkeop<5.15.0-1055.62
5.15.0-1055.62
ubuntu/linux-ibm<5.15.0-1065.68
5.15.0-1065.68
ubuntu/linux-kvm<5.15.0-1069.74
5.15.0-1069.74
ubuntu/linux-lowlatency<5.15.0-125.135
5.15.0-125.135
ubuntu/linux-nvidia<5.15.0-1067.68
5.15.0-1067.68
ubuntu/linux-oracle<5.15.0-1070.76
5.15.0-1070.76
ubuntu/linux-raspi<5.15.0-1065.68
5.15.0-1065.68
ubuntu/linux-xilinx-zynqmp<5.15.0-1038.42
5.15.0-1038.42

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1038-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1038.42
  2. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1055-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.62
  3. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1065-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.68
  4. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1065-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.68
  5. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1067-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.68
  6. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1067-nvidia-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.68
  7. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1069-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.75
  8. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1069-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.74
  9. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1070-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1070.76
  10. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1071-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.79
  11. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-125-generic to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135
  12. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-125-generic-64k to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135
  13. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-125-generic-lpae to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135
  14. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-125-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135
  15. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-125-lowlatency-64k to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135
  16. Upgrade

    Upgrade ubuntu/linux-image-gcp-lts-22.04 to a version that resolves this vulnerability.

    Fixed in 5.15.0.1071.67
  17. Upgrade

    Upgrade ubuntu/linux-image-generic to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.124
  18. Upgrade

    Upgrade ubuntu/linux-image-generic-64k to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.124
  19. Upgrade

    Upgrade ubuntu/linux-image-generic-lpae to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.124
  20. Upgrade

    Upgrade ubuntu/linux-image-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0.1069.68
  21. Upgrade

    Upgrade ubuntu/linux-image-gke-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0.1069.68
  22. Upgrade

    Upgrade ubuntu/linux-image-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0.1055.54
  23. Upgrade

    Upgrade ubuntu/linux-image-gkeop-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0.1055.54
  24. Upgrade

    Upgrade ubuntu/linux-image-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0.1065.61
  25. Upgrade

    Upgrade ubuntu/linux-image-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0.1069.65
  26. Upgrade

    Upgrade ubuntu/linux-image-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.113
  27. Upgrade

    Upgrade ubuntu/linux-image-lowlatency-64k to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.113
  28. Upgrade

    Upgrade ubuntu/linux-image-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0.1067.67
  29. Upgrade

    Upgrade ubuntu/linux-image-nvidia-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0.1067.67
  30. Upgrade

    Upgrade ubuntu/linux-image-oracle-lts-22.04 to a version that resolves this vulnerability.

    Fixed in 5.15.0.1070.66
  31. Upgrade

    Upgrade ubuntu/linux-image-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0.1065.63
  32. Upgrade

    Upgrade ubuntu/linux-image-raspi-nolpae to a version that resolves this vulnerability.

    Fixed in 5.15.0.1065.63
  33. Upgrade

    Upgrade ubuntu/linux-image-virtual to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.124
  34. Upgrade

    Upgrade ubuntu/linux-image-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.15.0.1038.42
  35. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1055-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.62~20.04.1
  36. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1065-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.68~20.04.1
  37. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1070-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1070.76~20.04.1
  38. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1071-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.79~20.04.1
  39. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-1072-aws to a version that resolves this vulnerability.

    Fixed in 5.15.0-1072.78~20.04.1
  40. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-125-generic to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135~20.04.1
  41. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-125-generic-64k to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135~20.04.1
  42. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-125-generic-lpae to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135~20.04.1
  43. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-125-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135~20.04.1
  44. Upgrade

    Upgrade ubuntu/linux-image-5.15.0-125-lowlatency-64k to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135~20.04.1
  45. Upgrade

    Upgrade ubuntu/linux-image-aws to a version that resolves this vulnerability.

    Fixed in 5.15.0.1072.78~20.04.1
  46. Upgrade

    Upgrade ubuntu/linux-image-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0.1071.79~20.04.1
  47. Upgrade

    Upgrade ubuntu/linux-image-generic-64k-hwe-20.04 to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.135~20.04.1
  48. Upgrade

    Upgrade ubuntu/linux-image-generic-hwe-20.04 to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.135~20.04.1
  49. Upgrade

    Upgrade ubuntu/linux-image-generic-lpae-hwe-20.04 to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.135~20.04.1
  50. Upgrade

    Upgrade ubuntu/linux-image-gkeop-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0.1055.62~20.04.1
  51. Upgrade

    Upgrade ubuntu/linux-image-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0.1065.68~20.04.1
  52. Upgrade

    Upgrade ubuntu/linux-image-lowlatency-64k-hwe-20.04 to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.135~20.04.1
  53. Upgrade

    Upgrade ubuntu/linux-image-lowlatency-hwe-20.04 to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.135~20.04.1
  54. Upgrade

    Upgrade ubuntu/linux-image-oem-20.04 to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.135~20.04.1
  55. Upgrade

    Upgrade ubuntu/linux-image-oem-20.04b to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.135~20.04.1
  56. Upgrade

    Upgrade ubuntu/linux-image-oem-20.04c to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.135~20.04.1
  57. Upgrade

    Upgrade ubuntu/linux-image-oem-20.04d to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.135~20.04.1
  58. Upgrade

    Upgrade ubuntu/linux-image-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0.1070.76~20.04.1
  59. Upgrade

    Upgrade ubuntu/linux-image-virtual-hwe-20.04 to a version that resolves this vulnerability.

    Fixed in 5.15.0.125.135~20.04.1
  60. Upgrade

    Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1072.78~20.04.1
  61. Upgrade

    Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.79~20.04.1
  62. Upgrade

    Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.62~20.04.1
  63. Upgrade

    Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135~20.04.1
  64. Upgrade

    Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.68~20.04.1
  65. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135~20.04.1
  66. Upgrade

    Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1070.76~20.04.1
  67. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135
  68. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1071.79
  69. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.75
  70. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.62
  71. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.68
  72. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.74
  73. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-125.135
  74. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.68
  75. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1070.76
  76. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.68
  77. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1038.42
  78. Upgrade

    Upgrade Linux kernel to a version that resolves this vulnerability.

    Patch USN-7100-1

Event History

Nov 11, 2024
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Advisory Published
via OSV·03:11 PM
Data Sourced
via OSV·03:11 PM
DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of USN-7100-1?

The severity of USN-7100-1 is categorized as important due to potential exploitation risks.

2

How do I fix USN-7100-1?

To fix USN-7100-1, update your system to the recommended package versions or apply the security patches provided by Ubuntu.

3

What are the affected versions in USN-7100-1?

Affected versions include various Linux kernel packages in Ubuntu 22.04, such as linux-image-5.15.0-125 and others listed in the advisory.

4

Can USN-7100-1 be exploited remotely?

Yes, an attacker with access to the Virtual Machine Monitor (VMM) can exploit the vulnerability introduced in USN-7100-1.

5

What platforms are impacted by USN-7100-1?

USN-7100-1 affects Linux kernel implementations on x86 platforms that utilize the Confidential Computing framework.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203