USN-7179-2: Linux kernel vulnerabilities
First published: Mon Jan 06 2025(Updated: )
Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-12351) Andy Nguyen discovered that the Bluetooth A2MP implementation in the Linux kernel did not properly initialize memory in some situations. A physically proximate remote attacker could use this to expose sensitive information (kernel memory). (CVE-2020-12352) Andy Nguyen discovered that the Bluetooth HCI event packet parser in the Linux kernel did not properly handle event advertisements of certain sizes, leading to a heap-based buffer overflow. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-24490) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-5.15.0-1070-nvidia | <5.15.0-1070.71 | 5.15.0-1070.71 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-1070-nvidia-lowlatency | <5.15.0-1070.71 | 5.15.0-1070.71 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-1070-raspi | <5.15.0-1070.73 | 5.15.0-1070.73 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-1073-oracle | <5.15.0-1073.79 | 5.15.0-1073.79 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-1074-gcp | <5.15.0-1074.83 | 5.15.0-1074.83 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-1076-aws | <5.15.0-1076.83 | 5.15.0-1076.83 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-aws-lts-22.04 | <5.15.0.1076.78 | 5.15.0.1076.78 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-gcp-lts-22.04 | <5.15.0.1074.70 | 5.15.0.1074.70 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-nvidia | <5.15.0.1070.70 | 5.15.0.1070.70 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-nvidia-lowlatency | <5.15.0.1070.70 | 5.15.0.1070.70 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-oracle-lts-22.04 | <5.15.0.1073.69 | 5.15.0.1073.69 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-raspi | <5.15.0.1070.68 | 5.15.0.1070.68 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-raspi-nolpae | <5.15.0.1070.68 | 5.15.0.1070.68 |
| =22.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-1074-gcp | <5.15.0-1074.83~20.04.1 | 5.15.0-1074.83~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-1075-aws | <5.15.0-1075.82~20.04.1 | 5.15.0-1075.82~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-130-generic | <5.15.0-130.140~20.04.1 | 5.15.0-130.140~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-130-generic-64k | <5.15.0-130.140~20.04.1 | 5.15.0-130.140~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.15.0-130-generic-lpae | <5.15.0-130.140~20.04.1 | 5.15.0-130.140~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-aws | <5.15.0.1075.82~20.04.1 | 5.15.0.1075.82~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-gcp | <5.15.0.1074.83~20.04.1 | 5.15.0.1074.83~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-generic-64k-hwe-20.04 | <5.15.0.130.140~20.04.1 | 5.15.0.130.140~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-generic-hwe-20.04 | <5.15.0.130.140~20.04.1 | 5.15.0.130.140~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae-hwe-20.04 | <5.15.0.130.140~20.04.1 | 5.15.0.130.140~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-oem-20.04 | <5.15.0.130.140~20.04.1 | 5.15.0.130.140~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-oem-20.04b | <5.15.0.130.140~20.04.1 | 5.15.0.130.140~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-oem-20.04c | <5.15.0.130.140~20.04.1 | 5.15.0.130.140~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-virtual-hwe-20.04 | <5.15.0.130.140~20.04.1 | 5.15.0.130.140~20.04.1 |
| =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2024-43904
- https://ubuntu.com/security/CVE-2024-40973
- https://ubuntu.com/security/CVE-2020-12352
- https://ubuntu.com/security/CVE-2024-35967
- https://ubuntu.com/security/CVE-2024-50264
- https://ubuntu.com/security/CVE-2024-26822
- https://ubuntu.com/security/CVE-2020-12351
- https://ubuntu.com/security/CVE-2020-24490
- https://ubuntu.com/security/CVE-2024-53057
- https://ubuntu.com/security/CVE-2024-35965
- https://ubuntu.com/security/CVE-2024-38553
- https://ubuntu.com/security/CVE-2024-40910
- https://ubuntu.com/security/CVE-2024-35966
- https://ubuntu.com/security/CVE-2024-35963
- https://ubuntu.com/security/notices/USN-7154-1
- https://ubuntu.com/security/notices/USN-7155-1
- https://ubuntu.com/security/notices/USN-7156-1
- https://ubuntu.com/security/notices/USN-7179-1
- https://ubuntu.com/security/notices/USN-7154-2
- https://ubuntu.com/security/notices/USN-7179-3
- https://ubuntu.com/security/notices/USN-7186-1
- https://ubuntu.com/security/notices/USN-7186-2
- https://ubuntu.com/security/notices/USN-7194-1
- https://ubuntu.com/security/notices/USN-7196-1
- https://ubuntu.com/security/notices/USN-7179-4
- https://ubuntu.com/security/notices/USN-6999-1
- https://ubuntu.com/security/notices/USN-7004-1
- https://ubuntu.com/security/notices/USN-7005-1
- https://ubuntu.com/security/notices/USN-7005-2
- https://ubuntu.com/security/notices/USN-7008-1
- https://ubuntu.com/security/notices/USN-6999-2
- https://ubuntu.com/security/notices/USN-7029-1
- https://ubuntu.com/security/notices/USN-4591-1
- https://ubuntu.com/security/notices/USN-4592-1
- https://ubuntu.com/security/notices/USN-4657-1
- https://ubuntu.com/security/notices/LSN-0073-1
- https://ubuntu.com/security/notices/LSN-0074-1
- https://ubuntu.com/security/notices/USN-7183-1
- https://ubuntu.com/security/notices/USN-6893-1
- https://ubuntu.com/security/notices/USN-6893-2
- https://ubuntu.com/security/notices/USN-6893-3
- https://ubuntu.com/security/notices/USN-6918-1
- https://ubuntu.com/security/notices/USN-7173-1
- https://ubuntu.com/security/notices/USN-7173-2
- https://ubuntu.com/security/notices/USN-7195-1
- https://ubuntu.com/security/notices/USN-7195-2
- https://ubuntu.com/security/notices/USN-7173-3
- https://ubuntu.com/security/notices/USN-7167-1
- https://ubuntu.com/security/notices/USN-7169-1
- https://ubuntu.com/security/notices/USN-7170-1
- https://ubuntu.com/security/notices/LSN-0108-1
- https://ubuntu.com/security/notices/USN-7169-2
- https://ubuntu.com/security/notices/USN-7185-1
- https://ubuntu.com/security/notices/USN-7169-4
- https://ubuntu.com/security/notices/USN-7167-2
- https://ubuntu.com/security/notices/USN-7169-3
- https://ubuntu.com/security/notices/USN-7185-2
- https://ubuntu.com/security/notices/USN-7169-5
- https://ubuntu.com/security/notices/USN-6895-1
- https://ubuntu.com/security/notices/USN-6895-2
- https://ubuntu.com/security/notices/USN-6900-1
- https://ubuntu.com/security/notices/USN-6895-3
- https://ubuntu.com/security/notices/USN-6895-4
- https://ubuntu.com/security/notices/USN-4752-1
- https://ubuntu.com/security/notices/USN-7163-1
- https://ubuntu.com/security/notices/USN-7184-1
- https://ubuntu.com/security/notices/USN-6949-1
- https://ubuntu.com/security/notices/USN-6952-1
- https://ubuntu.com/security/notices/USN-6955-1
- https://ubuntu.com/security/notices/USN-6949-2
- https://ubuntu.com/security/notices/USN-7233-1
- https://ubuntu.com/security/notices/USN-7233-2
- https://ubuntu.com/security/notices/USN-7233-3
- https://launchpad.net/ubuntu/+source/linux-signed-nvidia/5.15.0-1070.71
- https://launchpad.net/ubuntu/+source/linux-raspi/5.15.0-1070.73
- https://launchpad.net/ubuntu/+source/linux-signed-oracle/5.15.0-1073.79
- https://launchpad.net/ubuntu/+source/linux-signed-gcp/5.15.0-1074.83
- https://launchpad.net/ubuntu/+source/linux-signed-aws/5.15.0-1076.83
- https://launchpad.net/ubuntu/+source/linux-meta-aws/5.15.0.1076.78
- https://launchpad.net/ubuntu/+source/linux-meta-gcp/5.15.0.1074.70
- https://launchpad.net/ubuntu/+source/linux-meta-nvidia/5.15.0.1070.70
- https://launchpad.net/ubuntu/+source/linux-meta-oracle/5.15.0.1073.69
- https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.15.0.1070.68
- https://launchpad.net/ubuntu/+source/linux-signed-gcp-5.15/5.15.0-1074.83~20.04.1
- https://launchpad.net/ubuntu/+source/linux-signed-aws-5.15/5.15.0-1075.82~20.04.1
- https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.15/5.15.0-130.140~20.04.1
- https://launchpad.net/ubuntu/+source/linux-hwe-5.15/5.15.0-130.140~20.04.1
- https://launchpad.net/ubuntu/+source/linux-meta-aws-5.15/5.15.0.1075.82~20.04.1
- https://launchpad.net/ubuntu/+source/linux-meta-gcp-5.15/5.15.0.1074.83~20.04.1
- https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.15/5.15.0.130.140~20.04.1
- https://ubuntu.com/security/notices/USN-7179-2 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
- agent/severity
- agent/weakness
- agent/title
- agent/last-modified-date
- agent/type
- agent/first-publish-date
- agent/description
- agent/source
- agent/references
- agent/softwarecombine
- agent/event
- agent/tags
- collector/usn
- source/Ubuntu
- package-manager/ubuntu
- vendor/ubuntu