CLSA-2024-1723622576
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1723622576.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2024-1723622576
- Upstream
- Published
- 2024-08-14T08:02:59Z
- Modified
- 2026-06-04T10:04:28.661989313Z
- Summary
- Fix of 29 CVEs
- Details
-
- CVE-url: https://ubuntu.com/security/CVE-2024-42236
- usb: gadget: configfs: Prevent OOB read/write in usbstringcopy()
- CVE-url: https://ubuntu.com/security/CVE-2024-41095
- drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgetldmodes
- CVE-url: https://ubuntu.com/security/CVE-2024-41098
- ata: libata-core: Fix null pointer dereference on error
- CVE-url: https://ubuntu.com/security/CVE-2024-42244
- USB: serial: mos7840: fix crash on resume
- CVE-url: https://ubuntu.com/security/CVE-2024-41089
- drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgethdmodes
- CVE-url: https://ubuntu.com/security/CVE-2024-42232
- libceph: fix race between delayedwork() and cephmonc_stop()
- CVE-url: https://ubuntu.com/security/CVE-2024-42153
- i2c: pnx: Fix potential deadlock warning from deltimersync() call in isr
- CVE-url: https://ubuntu.com/security/CVE-2022-48791
- scsi: pm80xx: Fix TMF task completion race condition
- scsi: pm8001: Fix use-after-free for aborted TMF sas_task
- CVE-url: https://ubuntu.com/security/CVE-2022-48788
- nvme-rdma: fix possible use-after-free in transport error_recovery work
- CVE-url: https://ubuntu.com/security/CVE-2022-48792
- scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
- CVE-url: https://ubuntu.com/security/CVE-2022-48790
- nvme: fix a possible use-after-free in controller reset during load
- CVE-url: https://ubuntu.com/security/CVE-2024-42154
- tcp_metrics: validate source addr length
- CVE-url: https://ubuntu.com/security/CVE-2024-38596
- afunix: Fix data races in unixreleasesock/unixstream_sendmsg
- CVE-url: https://ubuntu.com/security/CVE-2024-36270
- netfilter: tproxy: bail out if IP has been disabled on the device
- CVE-url: https://ubuntu.com/security/CVE-2024-38780
- dma-buf/sw-sync: don't enable IRQ from syncprintobj()
- CVE-url: https://ubuntu.com/security/CVE-2024-36886
- tipc: fix UAF in error path
- CVE-url: https://ubuntu.com/security/CVE-2024-42068
- bpf: Take return from setmemoryro() into account with bpfproglock_ro()
- CVE-url: https://ubuntu.com/security/CVE-2024-42156
- s390/pkey: Wipe copies of clear-key structures on failure
- CVE-url: https://ubuntu.com/security/CVE-2024-42079
- gfs2: Fix NULL pointer dereference in gfs2logflush
- CVE-url: https://ubuntu.com/security/CVE-2024-42223
- media: dvb-frontends: tda10048: Fix integer overflow
- CVE-url: https://ubuntu.com/security/CVE-2024-42157
- s390/pkey: Wipe sensitive data on failure
- CVE-url: https://ubuntu.com/security/CVE-2024-42160
- f2fs: indicate shutdown f2fs to allow unmount successfully
- f2fs: support faulttype mount option
- f2fs: check validation of fault attrs in f2fsbuildfaultattr()
- CVE-url: https://ubuntu.com/security/CVE-2024-42224
- net: dsa: mv88e6xxx: Correct check for empty list
- CVE-url: https://ubuntu.com/security/CVE-2024-38570
- gfs2: Rename sd_{ glock => kill }_wait
- gfs2: Fix potential glock use-after-free on unmount
- CVE-url: https://ubuntu.com/security/CVE-2024-38583
- nilfs2: fix use-after-free of timer for log writer thread
- nilfs2: fix unexpected freezing of nilfssegctorsync()
- nilfs2: fix potential hang in nilfsdetachlog_writer()
- CVE-url: https://ubuntu.com/security/CVE-2024-42070
- netfilter: nftables: fully validate NFTDATA_VALUE on store to data registers
- CVE-url: https://ubuntu.com/security/CVE-2024-42077
- ocfs2: fix DIO failure due to insufficient transaction credits
- CVE-url: https://ubuntu.com/security/CVE-2024-42226
- usb: xhci: prevent potential failure in handletxevent() for Transfer events without TRB
- CVE-url: https://ubuntu.com/security/CVE-2024-42228
- drm/amdgpu: Using uninitialized value *size when calling amdgpuvcecs_reloc
- CVE-url: https://ubuntu.com/security/CVE-2024-42236
- References
Affected packages
TuxCare:Ubuntu:18.04
linux-buildinfo-4.15.0-234-tuxcare.els22-generic
linux-buildinfo-4.15.0-234-tuxcare.els22-lowlatency
linux-cloud-tools-4.15.0-234-tuxcare.els22
linux-cloud-tools-4.15.0-234-tuxcare.els22-generic
linux-cloud-tools-4.15.0-234-tuxcare.els22-lowlatency
linux-cloud-tools-common
linux-cloud-tools-generic
linux-cloud-tools-lowlatency
linux-crashdump
linux-doc
linux-generic
linux-headers-4.15.0-234-tuxcare.els22
linux-headers-4.15.0-234-tuxcare.els22-generic
linux-headers-4.15.0-234-tuxcare.els22-lowlatency
linux-headers-generic
linux-headers-lowlatency
linux-image-generic
linux-image-lowlatency
linux-image-unsigned-4.15.0-234-tuxcare.els22-generic
linux-image-unsigned-4.15.0-234-tuxcare.els22-lowlatency
Package
- Name
- linux-image-unsigned-4.15.0-234-tuxcare.els22-lowlatency
- Purl
- pkg:deb/tuxcare/linux-image-unsigned-4.15.0-234-tuxcare.els22-lowlatency?distro=ubuntu-18.04