USN-6699-1: Linux kernel vulnerabilities
Publication date
18 March 2024
Overview
Several security issues were fixed in the Linux kernel.
Releases
Packages
- linux - Linux kernel
Details
Reima Ishii discovered that the nested KVM implementation for Intel x86
processors in the Linux kernel did not properly validate control registers
in certain situations. An attacker in a guest VM could use this to cause a
denial of service (guest crash). (CVE-2023-30456)
It was discovered that the Quick Fair Queueing scheduler implementation in
the Linux kernel did not properly handle network packets in certain
conditions, leading to a use after free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2023-4921)
It was discovered that a race condition existed in the SCSI Emulex
LightPulse Fibre Channel driver in the Linux kernel when unregistering FCF
and re-scanning an HBA FCF table, leading to a null pointer dereference
vulnerability. A local attacker could use this to...
Reima Ishii discovered that the nested KVM implementation for Intel x86
processors in the Linux kernel did not properly validate control registers
in certain situations. An attacker in a guest VM could use this to cause a
denial of service (guest crash). (CVE-2023-30456)
It was discovered that the Quick Fair Queueing scheduler implementation in
the Linux kernel did not properly handle network packets in certain
conditions, leading to a use after free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2023-4921)
It was discovered that a race condition existed in the SCSI Emulex
LightPulse Fibre Channel driver in the Linux kernel when unregistering FCF
and re-scanning an HBA FCF table, leading to a null pointer dereference
vulnerability. A local attacker could use this to cause a denial of service
(system crash). (CVE-2024-24855)
Update instructions
After a standard system update you need to reboot your computer to make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
Ubuntu Release | Package Version | ||
---|---|---|---|
14.04 trusty | linux-image-3.13.0-197-generic – 3.13.0-197.248 | ||
linux-image-3.13.0-197-lowlatency – 3.13.0-197.248 | |||
linux-image-generic – 3.13.0.197.207 | |||
linux-image-generic-lts-trusty – 3.13.0.197.207 | |||
linux-image-lowlatency – 3.13.0.197.207 | |||
linux-image-server – 3.13.0.197.207 | |||
linux-image-virtual – 3.13.0.197.207 |
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.
Related notices
- USN-6716-1
- USN-6705-1
- USN-6704-1
- USN-6704-2
- USN-6704-3
- USN-6704-4
- USN-6702-1
- USN-6702-2
- USN-6701-1
- USN-6701-2
- USN-6716-1
- USN-6705-1
- USN-6704-1
- USN-6704-2
- USN-6704-3
- USN-6704-4
- USN-6702-1
- USN-6702-2
- USN-6701-1
- USN-6701-2
- USN-6701-3
- USN-6701-4
- USN-6700-1
- USN-6700-2
- USN-6479-1
- USN-6466-1
- USN-6461-1
- USN-6454-1
- USN-6454-2
- USN-6454-3
- USN-6454-4
- USN-6446-1
- USN-6446-2
- USN-6446-3
- USN-6445-1
- USN-6445-2
- USN-6444-1
- USN-6444-2
- USN-6442-1
- USN-6441-1
- USN-6441-2
- USN-6441-3
- USN-6440-1
- USN-6440-2
- USN-6440-3
- USN-6439-1
- USN-6439-2
- USN-6256-1
- USN-6222-1
- USN-6186-1
- USN-6175-1
- USN-6162-1
- USN-6150-1
- USN-6149-1
- USN-6135-1
- USN-6132-1
- USN-6131-1
- USN-6130-1
- USN-6127-1
- USN-6124-1
- USN-6123-1
- USN-6033-1
- LSN-0096-1
Have additional questions?