USN-7088-2

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-7088-2

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7088-2.json

JSON Data

https://api.osv.dev/v1/vulns/USN-7088-2

Related

Published

2024-11-04T17:00:57.004931Z

Modified

2024-11-04T17:00:57.004931Z

Summary

linux-azure, linux-bluefield vulnerabilities

Details

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - User-Mode Linux (UML); - x86 architecture; - Block layer subsystem; - Cryptographic API; - Android drivers; - Serial ATA and Parallel ATA drivers; - ATM drivers; - Drivers core; - CPU frequency scaling framework; - Device frequency scaling framework; - GPU drivers; - HID subsystem; - Hardware monitoring drivers; - InfiniBand drivers; - Input Device core drivers; - Input Device (Miscellaneous) drivers; - IOMMU subsystem; - IRQ chip drivers; - ISDN/mISDN subsystem; - LED subsystem; - Multiple devices driver; - Media drivers; - EEPROM drivers; - VMware VMCI Driver; - MMC subsystem; - Network drivers; - Near Field Communication (NFC) drivers; - NVME drivers; - Device tree and open firmware driver; - Parport drivers; - PCI subsystem; - Pin controllers subsystem; - Remote Processor subsystem; - S/390 drivers; - SCSI drivers; - QCOM SoC drivers; - Direct Digital Synthesis drivers; - TTY drivers; - Userspace I/O drivers; - DesignWare USB3 driver; - USB Gadget drivers; - USB Serial drivers; - BTRFS file system; - File systems infrastructure; - Ext4 file system; - F2FS file system; - JFS file system; - NILFS2 file system; - BPF subsystem; - Core kernel; - DMA mapping infrastructure; - Tracing infrastructure; - Radix Tree data structure library; - Kernel userspace event delivery library; - Objagg library; - Memory management; - Amateur Radio drivers; - Bluetooth subsystem; - CAN network layer; - Networking core; - Ethtool driver; - IPv4 networking; - IPv6 networking; - IUCV driver; - KCM (Kernel Connection Multiplexor) sockets driver; - MAC80211 subsystem; - Netfilter; - Network traffic control; - SCTP protocol; - Sun RPC protocol; - TIPC protocol; - TLS protocol; - Wireless networking; - AppArmor security module; - Simplified Mandatory Access Control Kernel framework; - SoC audio core drivers; - USB sound devices; (CVE-2024-46714, CVE-2024-42288, CVE-2024-42290, CVE-2024-44987, CVE-2024-41090, CVE-2024-42313, CVE-2024-46689, CVE-2024-46737, CVE-2024-44946, CVE-2024-44999, CVE-2024-44935, CVE-2024-38602, CVE-2024-43883, CVE-2024-26607, CVE-2024-41091, CVE-2024-45025, CVE-2024-42305, CVE-2024-26891, CVE-2024-41073, CVE-2024-44969, CVE-2024-26641, CVE-2024-46719, CVE-2024-40929, CVE-2024-46721, CVE-2024-46740, CVE-2024-41012, CVE-2024-42280, CVE-2024-46738, CVE-2024-46722, CVE-2024-42246, CVE-2024-41063, CVE-2024-41072, CVE-2024-41068, CVE-2024-43884, CVE-2024-46758, CVE-2024-43861, CVE-2024-42306, CVE-2024-42285, CVE-2024-41065, CVE-2024-46818, CVE-2024-43894, CVE-2024-44954, CVE-2024-42310, CVE-2024-46829, CVE-2023-52614, CVE-2024-47663, CVE-2024-42281, CVE-2024-42297, CVE-2024-46800, CVE-2024-44960, CVE-2024-44952, CVE-2024-46747, CVE-2024-42286, CVE-2024-41071, CVE-2024-43893, CVE-2023-52531, CVE-2024-43860, CVE-2024-46840, CVE-2024-41011, CVE-2024-43890, CVE-2024-45026, CVE-2024-42292, CVE-2024-27051, CVE-2024-41015, CVE-2024-47668, CVE-2024-46817, CVE-2024-43846, CVE-2024-44988, CVE-2024-44944, CVE-2024-43829, CVE-2024-45021, CVE-2024-43914, CVE-2024-43856, CVE-2024-46673, CVE-2024-46771, CVE-2024-41081, CVE-2024-43830, CVE-2024-43839, CVE-2024-43853, CVE-2024-47669, CVE-2024-42244, CVE-2021-47212, CVE-2024-46844, CVE-2024-44965, CVE-2024-41059, CVE-2024-46783, CVE-2024-42295, CVE-2024-35848, CVE-2024-41017, CVE-2024-47659, CVE-2024-42309, CVE-2024-26800, CVE-2024-41064, CVE-2024-43879, CVE-2024-46679, CVE-2024-43854, CVE-2024-41022, CVE-2024-43858, CVE-2024-46739, CVE-2024-46685, CVE-2024-42289, CVE-2024-44998, CVE-2024-46761, CVE-2024-46677, CVE-2024-42131, CVE-2024-46815, CVE-2024-46777, CVE-2024-43880, CVE-2024-42276, CVE-2024-42265, CVE-2024-46723, CVE-2024-42259, CVE-2024-45028, CVE-2024-42229, CVE-2024-42283, CVE-2024-44948, CVE-2024-44995, CVE-2024-46757, CVE-2024-46822, CVE-2024-45006, CVE-2024-46780, CVE-2024-26668, CVE-2024-42284, CVE-2024-46782, CVE-2024-46781, CVE-2024-43871, CVE-2024-42304, CVE-2024-42311, CVE-2024-45003, CVE-2024-46745, CVE-2024-41098, CVE-2024-46750, CVE-2024-47667, CVE-2024-41020, CVE-2024-26640, CVE-2024-41070, CVE-2024-42301, CVE-2024-43882, CVE-2024-45008, CVE-2024-26885, CVE-2024-42287, CVE-2024-46744, CVE-2024-43908, CVE-2024-46798, CVE-2023-52918, CVE-2024-36484, CVE-2024-43841, CVE-2024-41042, CVE-2024-38611, CVE-2024-43867, CVE-2024-26669, CVE-2024-42271, CVE-2024-46756, CVE-2024-44947, CVE-2024-43835, CVE-2024-46676, CVE-2024-46743, CVE-2024-46759, CVE-2024-46675, CVE-2024-46828, CVE-2024-46755)

References

Affected packages

Ubuntu:20.04:LTS / linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1140.147

Affected versions

5.*

5.3.0-1003.3

5.3.0-1008.9

5.3.0-1009.10

5.4.0-1006.6

5.4.0-1008.8

5.4.0-1009.9

5.4.0-1010.10

5.4.0-1012.12

5.4.0-1016.16

5.4.0-1019.19

5.4.0-1020.20

5.4.0-1022.22

5.4.0-1023.23

5.4.0-1025.25

5.4.0-1026.26

5.4.0-1031.32

5.4.0-1032.33

5.4.0-1034.35

5.4.0-1035.36

5.4.0-1036.38

5.4.0-1039.41

5.4.0-1040.42

5.4.0-1041.43

5.4.0-1043.45

5.4.0-1044.46

5.4.0-1046.48

5.4.0-1047.49

5.4.0-1048.50

5.4.0-1049.51

5.4.0-1051.53

5.4.0-1055.57

5.4.0-1056.58

5.4.0-1058.60

5.4.0-1059.62

5.4.0-1061.64

5.4.0-1062.65

5.4.0-1063.66

5.4.0-1064.67

5.4.0-1065.68

5.4.0-1067.70

5.4.0-1068.71

5.4.0-1069.72

5.4.0-1070.73

5.4.0-1072.75

5.4.0-1073.76

5.4.0-1074.77

5.4.0-1077.80

5.4.0-1078.81

5.4.0-1080.83

5.4.0-1083.87

5.4.0-1085.90

5.4.0-1086.91

5.4.0-1089.94

5.4.0-1090.95

5.4.0-1091.96

5.4.0-1094.100

5.4.0-1095.101

5.4.0-1098.104

5.4.0-1100.106

5.4.0-1101.107

5.4.0-1103.109

5.4.0-1104.110

5.4.0-1105.111

5.4.0-1106.112

5.4.0-1107.113

5.4.0-1108.114

5.4.0-1109.115

5.4.0-1110.116

5.4.0-1111.117

5.4.0-1112.118

5.4.0-1113.119

5.4.0-1114.120

5.4.0-1115.122

5.4.0-1116.123

5.4.0-1117.124

5.4.0-1118.125

5.4.0-1119.126

5.4.0-1120.127

5.4.0-1121.128

5.4.0-1122.129

5.4.0-1123.130

5.4.0-1124.131

5.4.0-1126.133

5.4.0-1127.134

5.4.0-1128.135

5.4.0-1129.136

5.4.0-1130.137

5.4.0-1131.138

5.4.0-1132.139

5.4.0-1133.140

5.4.0-1134.141

5.4.0-1135.142

5.4.0-1136.143

5.4.0-1137.144

5.4.0-1138.145

5.4.0-1139.146

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "5.4.0-1140.147",
            "binary_name": "linux-azure-cloud-tools-5.4.0-1140"
        },
        {
            "binary_version": "5.4.0-1140.147",
            "binary_name": "linux-azure-headers-5.4.0-1140"
        },
        {
            "binary_version": "5.4.0-1140.147",
            "binary_name": "linux-azure-tools-5.4.0-1140"
        },
        {
            "binary_version": "5.4.0-1140.147",
            "binary_name": "linux-buildinfo-5.4.0-1140-azure"
        },
        {
            "binary_version": "5.4.0-1140.147",
            "binary_name": "linux-cloud-tools-5.4.0-1140-azure"
        },
        {
            "binary_version": "5.4.0-1140.147",
            "binary_name": "linux-headers-5.4.0-1140-azure"
        },
        {
            "binary_version": "5.4.0-1140.147",
            "binary_name": "linux-image-unsigned-5.4.0-1140-azure"
        },
        {
            "binary_version": "5.4.0-1140.147",
            "binary_name": "linux-image-unsigned-5.4.0-1140-azure-dbgsym"
        },
        {
            "binary_version": "5.4.0-1140.147",
            "binary_name": "linux-modules-5.4.0-1140-azure"
        },
        {
            "binary_version": "5.4.0-1140.147",
            "binary_name": "linux-modules-extra-5.4.0-1140-azure"
        },
        {
            "binary_version": "5.4.0-1140.147",
            "binary_name": "linux-tools-5.4.0-1140-azure"
        }
    ]
}

Ubuntu:20.04:LTS / linux-bluefield

Package

Name: linux-bluefield
Purl: pkg:deb/ubuntu/linux-bluefield?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1095.102

Affected versions

5.*

5.4.0-1007.10

5.4.0-1011.14

5.4.0-1012.15

5.4.0-1013.16

5.4.0-1016.19

5.4.0-1019.22

5.4.0-1020.23

5.4.0-1021.24

5.4.0-1022.25

5.4.0-1023.26

5.4.0-1025.28

5.4.0-1026.29

5.4.0-1028.31

5.4.0-1030.33

5.4.0-1032.35

5.4.0-1035.38

5.4.0-1036.39

5.4.0-1040.44

5.4.0-1042.47

5.4.0-1044.49

5.4.0-1045.50

5.4.0-1046.51

5.4.0-1047.52

5.4.0-1049.55

5.4.0-1050.56

5.4.0-1054.60

5.4.0-1058.64

5.4.0-1059.65

5.4.0-1060.66

5.4.0-1062.68

5.4.0-1064.70

5.4.0-1065.71

5.4.0-1066.72

5.4.0-1068.74

5.4.0-1070.76

5.4.0-1071.77

5.4.0-1072.78

5.4.0-1073.79

5.4.0-1074.80

5.4.0-1075.81

5.4.0-1076.82

5.4.0-1077.83

5.4.0-1078.84

5.4.0-1079.85

5.4.0-1080.87

5.4.0-1081.88

5.4.0-1082.89

5.4.0-1083.90

5.4.0-1084.91

5.4.0-1085.92

5.4.0-1086.93

5.4.0-1087.94

5.4.0-1088.95

5.4.0-1089.96

5.4.0-1090.97

5.4.0-1091.98

5.4.0-1092.99

5.4.0-1093.100

5.4.0-1094.101

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "5.4.0-1095.102",
            "binary_name": "linux-bluefield-headers-5.4.0-1095"
        },
        {
            "binary_version": "5.4.0-1095.102",
            "binary_name": "linux-bluefield-tools-5.4.0-1095"
        },
        {
            "binary_version": "5.4.0-1095.102",
            "binary_name": "linux-buildinfo-5.4.0-1095-bluefield"
        },
        {
            "binary_version": "5.4.0-1095.102",
            "binary_name": "linux-headers-5.4.0-1095-bluefield"
        },
        {
            "binary_version": "5.4.0-1095.102",
            "binary_name": "linux-image-unsigned-5.4.0-1095-bluefield"
        },
        {
            "binary_version": "5.4.0-1095.102",
            "binary_name": "linux-image-unsigned-5.4.0-1095-bluefield-dbgsym"
        },
        {
            "binary_version": "5.4.0-1095.102",
            "binary_name": "linux-modules-5.4.0-1095-bluefield"
        },
        {
            "binary_version": "5.4.0-1095.102",
            "binary_name": "linux-tools-5.4.0-1095-bluefield"
        }
    ]
}