Ubuntu update for linux

Published: 2024-07-29

Risk	Low
Patch available	YES
Number of vulnerabilities	7
CVE-ID	CVE-2024-25742 CVE-2024-35990 CVE-2024-35997 CVE-2024-35992 CVE-2024-35984 CVE-2024-36008 CVE-2024-36016
CWE-ID	CWE-94 CWE-667 CWE-835 CWE-125 CWE-476 CWE-787
Exploitation vector	Local
Public exploit	N/A
Vulnerable software Subscribe	Ubuntu Operating systems & Components / Operating system linux-image-virtual-hwe-24.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-raspi (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-24.04a (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-24.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-nvidia-64k (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-nvidia (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-ibm-lts-24.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-ibm-classic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-ibm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gke (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-hwe-24.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-64k-hwe-24.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-64k (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-6.8.0-39-generic-64k (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-6.8.0-39-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-6.8.0-1012-aws (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-6.8.0-1011-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-6.8.0-1010-nvidia-64k (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-6.8.0-1010-nvidia (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-6.8.0-1009-oem (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-6.8.0-1009-ibm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-6.8.0-1008-raspi (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-6.8.0-1007-gke (Ubuntu package) Operating systems & Components / Operating system package or component
Vendor	Canonical Ltd.

Security Bulletin

This security bulletin contains information about 7 vulnerabilities.

1) Code Injection

EUVDB-ID: #VU89087

Risk: Low

CVSSv3.1: 4 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-25742

CWE-ID: CWE-94 - Improper Control of Generation of Code ('Code Injection')

Exploit availability: No

Description

The vulnerability allows a malicious hypervisor to escalate privileges on the system.

The vulnerability exists due to improper input validation when handling interrupts. A malicious hypervisor can inject interrupt 0x80, which is used by Linux for legacy 32-bit system calls, and arbitrarily change the value stored in EAX while a SEV VM is running.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 24.04

linux-image-virtual-hwe-24.04 (Ubuntu package): before 6.8.0-39.39

linux-image-virtual (Ubuntu package): before 6.8.0-39.39

linux-image-raspi (Ubuntu package): before 6.8.0-1008.8

linux-image-oem-24.04a (Ubuntu package): before 6.8.0-1009.9

linux-image-oem-24.04 (Ubuntu package): before 6.8.0-1009.9

linux-image-nvidia-64k (Ubuntu package): before 6.8.0-1010.10

linux-image-nvidia (Ubuntu package): before 6.8.0-1010.10

linux-image-kvm (Ubuntu package): before 6.8.0-39.39

linux-image-ibm-lts-24.04 (Ubuntu package): before 6.8.0-1009.9

linux-image-ibm-classic (Ubuntu package): before 6.8.0-1009.9

linux-image-ibm (Ubuntu package): before 6.8.0-1009.9

linux-image-gke (Ubuntu package): before 6.8.0-1007.10

linux-image-generic-lpae (Ubuntu package): before 6.8.0-39.39

linux-image-generic-hwe-24.04 (Ubuntu package): before 6.8.0-39.39

linux-image-generic-64k-hwe-24.04 (Ubuntu package): before 6.8.0-39.39

linux-image-generic-64k (Ubuntu package): before 6.8.0-39.39

linux-image-generic (Ubuntu package): before 6.8.0-39.39

linux-image-gcp (Ubuntu package): before 6.8.0-1011.12

linux-image-aws (Ubuntu package): before 6.8.0-1012.13

linux-image-6.8.0-39-generic-64k (Ubuntu package): before 6.8.0-39.39

linux-image-6.8.0-39-generic (Ubuntu package): before 6.8.0-39.39

linux-image-6.8.0-1012-aws (Ubuntu package): before 6.8.0-1012.13

linux-image-6.8.0-1011-gcp (Ubuntu package): before 6.8.0-1011.12

linux-image-6.8.0-1010-nvidia-64k (Ubuntu package): before 6.8.0-1010.10

linux-image-6.8.0-1010-nvidia (Ubuntu package): before 6.8.0-1010.10

linux-image-6.8.0-1009-oem (Ubuntu package): before 6.8.0-1009.9

linux-image-6.8.0-1009-ibm (Ubuntu package): before 6.8.0-1009.9

linux-image-6.8.0-1008-raspi (Ubuntu package): before 6.8.0-1008.8

linux-image-6.8.0-1007-gke (Ubuntu package): before 6.8.0-1007.10

CPE2.3

cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:

External links

http://ubuntu.com/security/notices/USN-6921-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Improper locking

EUVDB-ID: #VU91513

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-35990

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the xilinx_dpdma_chan_vsync_irq(), xilinx_dpdma_issue_pending() and xilinx_dpdma_chan_err_task() functions in drivers/dma/xilinx/xilinx_dpdma.c. A local user can perform a denial of service (DoS) attack.