USN-6867-1

Source
https://ubuntu.com/security/notices/USN-6867-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6867-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-6867-1
Related
Published
2024-07-03T21:40:16.624785Z
Modified
2024-07-03T21:40:16.624785Z
Summary
linux-bluefield, linux-iot vulnerabilities
Details

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - PowerPC architecture; - x86 architecture; - DMA engine subsystem; - EFI core; - GPU drivers; - InfiniBand drivers; - Multiple devices driver; - Network drivers; - Power supply drivers; - TCM subsystem; - Userspace I/O drivers; - USB subsystem; - Framebuffer layer; - AFS file system; - File systems infrastructure; - BTRFS file system; - Ext4 file system; - Bluetooth subsystem; - Networking core; - IPv4 networking; - IPv6 networking; - L2TP protocol; - MAC80211 subsystem; - Netfilter; - Netlink; - Wireless networking; (CVE-2021-47063, CVE-2024-26751, CVE-2024-26848, CVE-2024-26748, CVE-2024-26733, CVE-2024-26735, CVE-2024-26805, CVE-2024-26804, CVE-2024-26793, CVE-2023-52504, CVE-2024-27417, CVE-2024-27405, CVE-2024-26778, CVE-2024-27414, CVE-2024-26801, CVE-2024-26835, CVE-2024-27413, CVE-2024-26766, CVE-2024-27410, CVE-2024-27412, CVE-2024-26773, CVE-2024-26777, CVE-2024-26839, CVE-2024-26764, CVE-2024-26712, CVE-2024-26788, CVE-2024-26688, CVE-2024-26754, CVE-2021-47070, CVE-2024-26752, CVE-2024-26845, CVE-2024-26791, CVE-2024-26763, CVE-2024-27416, CVE-2024-26779, CVE-2024-26749, CVE-2024-26736, CVE-2024-26840, CVE-2024-26772, CVE-2024-26790)

References

Affected packages

Ubuntu:20.04:LTS / linux-bluefield

Package

Name
linux-bluefield
Purl
pkg:deb/ubuntu/linux-bluefield?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.4.0-1086.93

Affected versions

5.*

5.4.0-1007.10
5.4.0-1011.14
5.4.0-1012.15
5.4.0-1013.16
5.4.0-1016.19
5.4.0-1019.22
5.4.0-1020.23
5.4.0-1021.24
5.4.0-1022.25
5.4.0-1023.26
5.4.0-1025.28
5.4.0-1026.29
5.4.0-1028.31
5.4.0-1030.33
5.4.0-1032.35
5.4.0-1035.38
5.4.0-1036.39
5.4.0-1040.44
5.4.0-1042.47
5.4.0-1044.49
5.4.0-1045.50
5.4.0-1046.51
5.4.0-1047.52
5.4.0-1049.55
5.4.0-1050.56
5.4.0-1054.60
5.4.0-1058.64
5.4.0-1059.65
5.4.0-1060.66
5.4.0-1062.68
5.4.0-1064.70
5.4.0-1065.71
5.4.0-1066.72
5.4.0-1068.74
5.4.0-1070.76
5.4.0-1071.77
5.4.0-1072.78
5.4.0-1073.79
5.4.0-1074.80
5.4.0-1075.81
5.4.0-1076.82
5.4.0-1077.83
5.4.0-1078.84
5.4.0-1079.85
5.4.0-1080.87
5.4.0-1081.88
5.4.0-1082.89
5.4.0-1083.90
5.4.0-1084.91
5.4.0-1085.92

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "5.4.0-1086.93",
            "binary_name": "linux-bluefield-headers-5.4.0-1086"
        },
        {
            "binary_version": "5.4.0-1086.93",
            "binary_name": "linux-bluefield-tools-5.4.0-1086"
        },
        {
            "binary_version": "5.4.0-1086.93",
            "binary_name": "linux-buildinfo-5.4.0-1086-bluefield"
        },
        {
            "binary_version": "5.4.0-1086.93",
            "binary_name": "linux-headers-5.4.0-1086-bluefield"
        },
        {
            "binary_version": "5.4.0-1086.93",
            "binary_name": "linux-image-unsigned-5.4.0-1086-bluefield"
        },
        {
            "binary_version": "5.4.0-1086.93",
            "binary_name": "linux-image-unsigned-5.4.0-1086-bluefield-dbgsym"
        },
        {
            "binary_version": "5.4.0-1086.93",
            "binary_name": "linux-modules-5.4.0-1086-bluefield"
        },
        {
            "binary_version": "5.4.0-1086.93",
            "binary_name": "linux-tools-5.4.0-1086-bluefield"
        }
    ]
}

Ubuntu:20.04:LTS / linux-iot

Package

Name
linux-iot
Purl
pkg:deb/ubuntu/linux-iot?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.4.0-1038.39

Affected versions

5.*

5.4.0-1001.3
5.4.0-1004.6
5.4.0-1005.7
5.4.0-1006.8
5.4.0-1009.11
5.4.0-1010.12
5.4.0-1011.13
5.4.0-1012.14
5.4.0-1013.15
5.4.0-1014.16
5.4.0-1017.18
5.4.0-1018.19
5.4.0-1019.20
5.4.0-1021.22
5.4.0-1022.23
5.4.0-1023.24
5.4.0-1024.25
5.4.0-1025.26
5.4.0-1026.27
5.4.0-1028.29
5.4.0-1029.30
5.4.0-1030.31
5.4.0-1031.32
5.4.0-1032.33
5.4.0-1033.34
5.4.0-1034.35
5.4.0-1035.36
5.4.0-1036.37
5.4.0-1037.38

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "5.4.0-1038.39",
            "binary_name": "linux-buildinfo-5.4.0-1038-iot"
        },
        {
            "binary_version": "5.4.0-1038.39",
            "binary_name": "linux-headers-5.4.0-1038-iot"
        },
        {
            "binary_version": "5.4.0-1038.39",
            "binary_name": "linux-image-5.4.0-1038-iot"
        },
        {
            "binary_version": "5.4.0-1038.39",
            "binary_name": "linux-image-5.4.0-1038-iot-dbgsym"
        },
        {
            "binary_version": "5.4.0-1038.39",
            "binary_name": "linux-image-unsigned-5.4.0-1038-iot"
        },
        {
            "binary_version": "5.4.0-1038.39",
            "binary_name": "linux-image-unsigned-5.4.0-1038-iot-dbgsym"
        },
        {
            "binary_version": "5.4.0-1038.39",
            "binary_name": "linux-iot-headers-5.4.0-1038"
        },
        {
            "binary_version": "5.4.0-1038.39",
            "binary_name": "linux-iot-tools-5.4.0-1038"
        },
        {
            "binary_version": "5.4.0-1038.39",
            "binary_name": "linux-iot-tools-common"
        },
        {
            "binary_version": "5.4.0-1038.39",
            "binary_name": "linux-modules-5.4.0-1038-iot"
        },
        {
            "binary_version": "5.4.0-1038.39",
            "binary_name": "linux-tools-5.4.0-1038-iot"
        }
    ]
}