USN-7342-1: Linux kernel vulnerabilities
Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7342-1?
The severity of USN-7342-1 is categorized as high due to a use-after-free vulnerability in the CEC driver.
How do I fix USN-7342-1?
To fix USN-7342-1, users should upgrade to the patched versions of the affected Linux kernel packages provided by Ubuntu.
Who discovered the vulnerability associated with USN-7342-1?
The vulnerability associated with USN-7342-1 was discovered by Chenyuan Yang.
What types of attacks can exploit USN-7342-1?
A local attacker can exploit USN-7342-1 to cause a denial of service or potentially execute arbitrary code.
Which systems are affected by USN-7342-1?
USN-7342-1 affects Ubuntu versions 16.04 and 18.04 running specific versions of the Linux kernel.