CLSA-2024-1706617379
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1706617379.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2024-1706617379
- Upstream
- Published
- 2024-01-30T12:23:02Z
- Modified
- 2026-06-04T10:04:20.747743603Z
- Summary
- Fix of 12 CVEs
- Details
-
- Jammy update: v5.15.140 upstream stable release (LP: #2050038) // CVE-url:
https://ubuntu.com/security/CVE-2024-0607
- netfilter: nftables: fix pointer math issue in nftbyteorder_eval()
- CVE-url: https://ubuntu.com/security/CVE-2024-0607
- netfilter: nf_tables: Introduce new 64-bit helper register functions
- Focal update: Focal update: v5.4.235 upstream stable release
(LP: #2017706) // CVE-url: https://ubuntu.com/security/CVE-2023-1079
- HID: asus: Remove check for same LED brightness on set
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: use spinlock to safely schedule workers
- CVE-url: https://ubuntu.com/security/CVE-2022-36402
- drm/vmwgfx: Add SM41 flag
- drm/vmwgfx: Add support for SVGA3dCmdDefineGBSurfacev3
- drm/vmwgfx: Add CAP2 support in vmwgfx
- drm/vmwgfx: Bump version patchlevel and date
- drm/vmwgfx: Expose SM4_1 param to user space
- drm/vmwgfx: Update the device headers
- drm/vmwgfx: Fix shader stage validation
- CVE-url: https://ubuntu.com/security/CVE-2024-0639
- sctp: fix potential deadlock on &net->sctp.addrwqlock
- CVE-url: https://ubuntu.com/security/CVE-2023-6915
- ida: Fix crash in ida_free when the bitmap is empty
- CVE-url: https://ubuntu.com/security/CVE-2023-6040
- netfilter: nf_tables: Reject tables of unsupported family
- CVE-url: https://ubuntu.com/security/CVE-2023-51780
- atm: Fix Use-After-Free in dovccioctl
- CVE-url: https://ubuntu.com/security/CVE-2023-51782
- net/rose: Fix Use-After-Free in rose_ioctl
- CVE-url: https://ubuntu.com/security/CVE-2023-51781
- appletalk: Fix Use-After-Free in atalk_ioctl
- CVE-url: https://ubuntu.com/security/CVE-2024-0340
- vhost: use kzalloc() instead of kmalloc() followed by memset()
- CVE-2023-51779 // CVE-url: https://ubuntu.com/security/CVE-2023-51779
- Bluetooth: afbluetooth: Fix Use-After-Free in btsock_recvmsg
- Jammy update: v5.15.135 upstream stable release (LP: #2045809) // CVE-url:
https://ubuntu.com/security/CVE-2023-34324
- xen/events: replace evtchn_rwlock with RCU
- Miscellaneous upstream changes
- drm/vmwgfx: Use enum to represent graphics context capabilities
- Jammy update: v5.15.140 upstream stable release (LP: #2050038) // CVE-url:
https://ubuntu.com/security/CVE-2024-0607
- References
Affected packages
TuxCare:Ubuntu:18.04
linux-buildinfo-4.15.0-223-tuxcare.els11-generic
linux-buildinfo-4.15.0-223-tuxcare.els11-lowlatency
linux-cloud-tools-4.15.0-223-tuxcare.els11
linux-cloud-tools-4.15.0-223-tuxcare.els11-generic
linux-cloud-tools-4.15.0-223-tuxcare.els11-lowlatency
linux-cloud-tools-common
linux-cloud-tools-generic
linux-cloud-tools-lowlatency
linux-crashdump
linux-doc
linux-generic
linux-headers-4.15.0-223-tuxcare.els11
linux-headers-4.15.0-223-tuxcare.els11-generic
linux-headers-4.15.0-223-tuxcare.els11-lowlatency
linux-headers-generic
linux-headers-lowlatency
linux-image-generic
linux-image-lowlatency
linux-image-unsigned-4.15.0-223-tuxcare.els11-generic
linux-image-unsigned-4.15.0-223-tuxcare.els11-lowlatency
Package
- Name
- linux-image-unsigned-4.15.0-223-tuxcare.els11-lowlatency
- Purl
- pkg:deb/tuxcare/linux-image-unsigned-4.15.0-223-tuxcare.els11-lowlatency?distro=ubuntu-18.04