USN-7173-3: Linux kernel (Raspberry Pi) vulnerabilities
Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - SCSI subsystem; - Ext4 file system; - Bluetooth subsystem; - Memory management; - Amateur Radio drivers; - Network traffic control; - Sun RPC protocol; - VMware vSockets driver; (CVE-2023-52821, CVE-2024-40910, CVE-2024-43892, CVE-2024-49967, CVE-2024-50264, CVE-2024-36952, CVE-2024-38553, CVE-2021-47101, CVE-2021-47001, CVE-2024-35965, CVE-2024-35963, CVE-2024-35966, CVE-2024-35967, CVE-2024-53057, CVE-2024-38597)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1121-raspito a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-raspi-hwe-18.04to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-raspi-5.4to a version that resolves this vulnerability.Fixed in 5.4.0-1121.133~18.04.1 - Upgrade
Upgrade
linux-raspi-5.4to a version that resolves this vulnerability.Patch USN-7173-3
Event History
Child vulnerabilities
Contains the following vulnerabilities.
- CVE-2024-53057
- CVE-2024-50264
- CVE-2024-49967
- CVE-2024-43892
- CVE-2024-40910
- CVE-2024-38597
- CVE-2024-38553
- CVE-2024-36952
- CVE-2024-35967
- CVE-2024-35966
- CVE-2021-47001
- CVE-2021-47101
- CVE-2022-38096
- CVE-2023-52821
- CVE-2024-35963
- CVE-2024-35965
- UBUNTU-CVE-2021-47001
- UBUNTU-CVE-2021-47101
- UBUNTU-CVE-2022-38096
- UBUNTU-CVE-2023-52821
- UBUNTU-CVE-2024-35963
- UBUNTU-CVE-2024-35965
- UBUNTU-CVE-2024-35966
- UBUNTU-CVE-2024-35967
- UBUNTU-CVE-2024-36952
- UBUNTU-CVE-2024-38553
- UBUNTU-CVE-2024-38597
- UBUNTU-CVE-2024-40910
- UBUNTU-CVE-2024-43892
- UBUNTU-CVE-2024-49967
- UBUNTU-CVE-2024-50264
- UBUNTU-CVE-2024-53057
Frequently Asked Questions
What is the severity of USN-7173-3?
The severity of USN-7173-3 is classified as a denial of service vulnerability.
How do I fix USN-7173-3?
To fix USN-7173-3, upgrade to the Linux image versions 5.4.0-1121.133~18.04.1 or 5.4.0.1121.133~18.04.1.
Which systems are affected by USN-7173-3?
USN-7173-3 affects Ubuntu 18.04 with specific versions of the Linux image packages.
What causes the vulnerability USN-7173-3?
The vulnerability USN-7173-3 is caused by the DRM driver for VMware Virtual GPU not handling certain error conditions effectively.
Can USN-7173-3 be exploited remotely?
No, USN-7173-3 requires local attacker access to trigger the vulnerability.