USN-7391-1: Linux kernel vulnerabilities
Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7391-1?
The severity of USN-7391-1 is typically high due to the potential for denial of service and arbitrary code execution.
How do I fix USN-7391-1?
To fix USN-7391-1, you should upgrade to the latest recommended Linux kernel version as specified in the Ubuntu advisory.
What is the cause of the USN-7391-1 vulnerability?
USN-7391-1 is caused by a use-after-free vulnerability in the CEC driver of the Linux kernel.
Who can exploit the USN-7391-1 vulnerability?
A local attacker can exploit the USN-7391-1 vulnerability to cause system crashes or to execute arbitrary code.
What versions of Ubuntu are affected by USN-7391-1?
USN-7391-1 affects Ubuntu versions 20.04 and 18.04 with specific kernel versions listed in the advisory.