USN-8257-1: Linux kernel (Raspberry Pi) vulnerabilities
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcode causing loss of integrity and confidentiality. (CVE-2024-36347) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-6.17.0-1014-raspito a version that resolves this vulnerability.Fixed in 6.17.0-1014.14 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 6.17.0-1014.14 - Upgrade
Upgrade
ubuntu/linux-image-raspi-6.17to a version that resolves this vulnerability.Fixed in 6.17.0-1014.14 - Upgrade
Upgrade
Linux kernel (Raspberry Pi)to a version that resolves this vulnerability.Patch USN-8257-1
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit the EntrySign issue?
The issue requires a privileged attacker. The provided information does not indicate that an unprivileged or remote attacker can load malicious CPU microcode through this flaw.
What could happen if the EntrySign issue is exploited?
A privileged attacker could potentially load malicious CPU microcode, resulting in loss of system integrity and confidentiality.
Which Ubuntu kernel packages are covered by this update?
The affected software listed includes linux-image-6.17.0-1014-raspi, linux-image-raspi, and linux-image-raspi-6.17 for Ubuntu.