Ubuntu update for linux

Published: 2024-08-22

Risk	Low
Patch available	YES
Number of vulnerabilities	8
CVE-ID	CVE-2024-26921 CVE-2023-52629 CVE-2024-26680 CVE-2024-26830 CVE-2024-39484 CVE-2024-39292 CVE-2024-36901 CVE-2023-52760
CWE-ID	CWE-191 CWE-416 CWE-20 CWE-401 CWE-399 CWE-476
Exploitation vector	Local
Public exploit	N/A
Vulnerable software	Ubuntu Operating systems & Components / Operating system linux-image-raspi (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-20.04c (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-20.04b (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-20.04d (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gkeop (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure-fde (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency-64k (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual-hwe-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency-hwe-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-lpae-hwe-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-hwe-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-64k-hwe-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure-cvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-raspi-nolpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oracle-lts-22.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-nvidia-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-nvidia (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-ibm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gkeop-5.15 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gke-5.15 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gke (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-64k (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp-lts-22.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure-lts-22.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure-fde-lts-22.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws-lts-22.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-119-lowlatency-64k (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-119-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-119-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-119-generic-64k (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-119-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1071-azure-fde (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1071-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1068-aws (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1067-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1066-oracle (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1065-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1065-gke (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1063-nvidia-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1063-nvidia (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1063-intel-iotg (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1061-raspi (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1061-ibm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.15.0-1051-gkeop (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-intel (Ubuntu package) Other linux-image-intel-iotg (Ubuntu package) Other
Vendor	Canonical Ltd.

Security Bulletin

This security bulletin contains information about 8 vulnerabilities.

1) Integer underflow

EUVDB-ID: #VU91672

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26921

CWE-ID: CWE-191 - Integer underflow

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer underflow within the nf_ct_frag6_queue() and nf_ct_frag6_gather() functions in net/ipv6/netfilter/nf_conntrack_reasm.c, within the ip_frag_queue() and ip_defrag() functions in net/ipv4/ip_fragment.c, within the FRAG_CB(), inet_frag_queue_insert(), inet_frag_reasm_prepare(), EXPORT_SYMBOL() and inet_frag_reasm_finish() functions in net/ipv4/inet_fragment.c. A local user can execute arbitrary code.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 20.04 - 22.04

linux-image-raspi (Ubuntu package): before 5.15.0.1061.59

linux-image-oem-20.04c (Ubuntu package): before 5.15.0.119.129~20.04.1

linux-image-oem-20.04b (Ubuntu package): before 5.15.0.119.129~20.04.1

linux-image-oem-20.04d (Ubuntu package): before 5.15.0.119.129~20.04.1

linux-image-gkeop (Ubuntu package): before 5.15.0.1051.50

linux-image-azure-fde (Ubuntu package): before 5.15.0.1071.80~20.04.1.48

linux-image-lowlatency-64k (Ubuntu package): before 5.15.0.119.109

linux-image-virtual-hwe-20.04 (Ubuntu package): before 5.15.0.119.129~20.04.1

linux-image-oem-20.04 (Ubuntu package): before 5.15.0.119.129~20.04.1

linux-image-lowlatency-hwe-20.04 (Ubuntu package): before 5.15.0.119.129~20.04.1

linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package): before 5.15.0.119.129~20.04.1

linux-image-intel (Ubuntu package): before 5.15.0.1063.69~20.04.1

linux-image-generic-lpae-hwe-20.04 (Ubuntu package): before 5.15.0.119.129~20.04.1

linux-image-generic-hwe-20.04 (Ubuntu package): before 5.15.0.119.129~20.04.1

linux-image-generic-64k-hwe-20.04 (Ubuntu package): before 5.15.0.119.129~20.04.1

linux-image-gcp (Ubuntu package): before 5.15.0.1067.75~20.04.1

linux-image-azure-cvm (Ubuntu package): before 5.15.0.1071.80~20.04.1

linux-image-azure (Ubuntu package): before 5.15.0.1071.80~20.04.1

linux-image-aws (Ubuntu package): before 5.15.0.1068.74~20.04.1

linux-image-virtual (Ubuntu package): before 5.15.0.119.119

linux-image-raspi-nolpae (Ubuntu package): before 5.15.0.1061.59

linux-image-oracle-lts-22.04 (Ubuntu package): before 5.15.0.1066.62

linux-image-nvidia-lowlatency (Ubuntu package): before 5.15.0.1063.63

linux-image-nvidia (Ubuntu package): before 5.15.0.1063.63

linux-image-lowlatency (Ubuntu package): before 5.15.0.119.109

linux-image-kvm (Ubuntu package): before 5.15.0.1065.61

linux-image-intel-iotg (Ubuntu package): before 5.15.0.1063.63

linux-image-ibm (Ubuntu package): before 5.15.0.1061.57

linux-image-gkeop-5.15 (Ubuntu package): before 5.15.0.1051.50

linux-image-gke-5.15 (Ubuntu package): before 5.15.0.1065.64

linux-image-gke (Ubuntu package): before 5.15.0.1065.64

linux-image-generic-lpae (Ubuntu package): before 5.15.0.119.119

linux-image-generic-64k (Ubuntu package): before 5.15.0.119.119

linux-image-generic (Ubuntu package): before 5.15.0.119.119

linux-image-gcp-lts-22.04 (Ubuntu package): before 5.15.0.1067.63

linux-image-azure-lts-22.04 (Ubuntu package): before 5.15.0.1071.69

linux-image-azure-fde-lts-22.04 (Ubuntu package): before 5.15.0.1071.80.48

linux-image-aws-lts-22.04 (Ubuntu package): before 5.15.0.1068.68

linux-image-5.15.0-119-lowlatency-64k (Ubuntu package): before 5.15.0-119.129~20.04.1

linux-image-5.15.0-119-lowlatency (Ubuntu package): before 5.15.0-119.129~20.04.1

linux-image-5.15.0-119-generic-lpae (Ubuntu package): before 5.15.0-119.129~20.04.1

linux-image-5.15.0-119-generic-64k (Ubuntu package): before 5.15.0-119.129~20.04.1

linux-image-5.15.0-119-generic (Ubuntu package): before 5.15.0-119.129~20.04.1

linux-image-5.15.0-1071-azure-fde (Ubuntu package): before 5.15.0-1071.80~20.04.1.1

linux-image-5.15.0-1071-azure (Ubuntu package): before 5.15.0-1071.80~20.04.1

linux-image-5.15.0-1068-aws (Ubuntu package): before 5.15.0-1068.74~20.04.1

linux-image-5.15.0-1067-gcp (Ubuntu package): before 5.15.0-1067.75~20.04.1

linux-image-5.15.0-1066-oracle (Ubuntu package): before 5.15.0-1066.72

linux-image-5.15.0-1065-kvm (Ubuntu package): before 5.15.0-1065.70

linux-image-5.15.0-1065-gke (Ubuntu package): before 5.15.0-1065.71

linux-image-5.15.0-1063-nvidia-lowlatency (Ubuntu package): before 5.15.0-1063.64

linux-image-5.15.0-1063-nvidia (Ubuntu package): before 5.15.0-1063.64

linux-image-5.15.0-1063-intel-iotg (Ubuntu package): before 5.15.0-1063.69~20.04.1

linux-image-5.15.0-1061-raspi (Ubuntu package): before 5.15.0-1061.64

linux-image-5.15.0-1061-ibm (Ubuntu package): before 5.15.0-1061.64~20.04.1

linux-image-5.15.0-1051-gkeop (Ubuntu package): before 5.15.0-1051.58~20.04.1

CPE2.3

External links

https://ubuntu.com/security/notices/USN-6974-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Use-after-free

EUVDB-ID: #VU90221

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52629

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the switch_drv_remove() function in arch/sh/drivers/push-switch.c. A local user can escalate privileges on the system.