Ubuntu update for linux

Published: 2025-04-09

Risk	Medium
Patch available	YES
Number of vulnerabilities	20
CVE-ID	CVE-2022-23041 CVE-2024-56615 CVE-2024-56600 CVE-2025-21700 CVE-2024-56658 CVE-2024-35960 CVE-2024-50265 CVE-2025-21702 CVE-2024-53227 CVE-2024-53165 CVE-2024-50167 CVE-2024-26863 CVE-2024-35973 CVE-2024-46826 CVE-2021-47119 CVE-2024-50302 CVE-2024-49952 CVE-2021-47101 CVE-2024-49948 CVE-2024-56595
CWE-ID	CWE-362 CWE-125 CWE-416 CWE-665 CWE-401 CWE-399 CWE-908 CWE-20 CWE-119
Exploitation vector	Local
Public exploit	Vulnerability #16 is being exploited in the wild.
Vulnerable software	Ubuntu Operating systems & Components / Operating system linux-image-4.15.0-236-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-236-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1187-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1179-aws (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1172-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1162-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1141-oracle (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oracle-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gke (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws-hwe (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oracle (Ubuntu package) Operating systems & Components / Operating system package or component
Vendor	Canonical Ltd.

Security Bulletin

This security bulletin contains information about 20 vulnerabilities.

1) Race condition

EUVDB-ID: #VU63310

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-23041

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to a race condition in blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls ring buffers. A malicious backend can exploit the race condition and read or write data or perform a denial of service attack.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 14.04 - 18.04

linux-image-4.15.0-236-lowlatency (Ubuntu package): before Ubuntu Pro

linux-image-4.15.0-236-generic (Ubuntu package): before Ubuntu Pro

linux-image-4.15.0-1187-azure (Ubuntu package): before Ubuntu Pro

linux-image-4.15.0-1179-aws (Ubuntu package): before Ubuntu Pro

linux-image-4.15.0-1172-gcp (Ubuntu package): before Ubuntu Pro

linux-image-4.15.0-1162-kvm (Ubuntu package): before Ubuntu Pro

linux-image-4.15.0-1141-oracle (Ubuntu package): before Ubuntu Pro

linux-image-oracle-lts-18.04 (Ubuntu package): before Ubuntu Pro

linux-image-gcp-lts-18.04 (Ubuntu package): before Ubuntu Pro

linux-image-azure-lts-18.04 (Ubuntu package): before Ubuntu Pro

linux-image-aws-lts-18.04 (Ubuntu package): before Ubuntu Pro

linux-image-lowlatency (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-kvm (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-generic (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-virtual (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-gcp (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-gke (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-azure (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-generic-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-lowlatency-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-oem (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-virtual-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)

CPE2.3

External links

https://ubuntu.com/security/notices/USN-7428-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds read

EUVDB-ID: #VU102083

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56615

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the dev_map_alloc(), dev_map_delete_elem() and dev_map_hash_delete_elem() functions in kernel/bpf/devmap.c. A local user can perform a denial of service (DoS) attack.