Summary
Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida
discovered that the Linux kernel mitigations for the initial Branch History
Injection vulnerability (CVE-2022-0001) were insufficient for Intel
processors. A local attacker could potentially use this to expose sensitive
information. (CVE-2024-2201)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Netfilter;
(CVE-2024-26925, CVE-2024-26643)
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux | 5.4.0-187.207 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws | 5.4.0-1127.137 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure | 5.4.0-1132.139 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-bluefield | 5.4.0-1087.94 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gcp | 5.4.0-1131.140 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gkeop | 5.4.0-1094.98 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-ibm | 5.4.0-1074.79 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-iot | 5.4.0-1039.40 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-kvm | 5.4.0-1115.122 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle | 5.4.0-1126.135 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-raspi | 5.4.0-1111.123 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-xilinx-zynqmp | 5.4.0-1046.50 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-azure-5.4 | 5.4.0-1132.139~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-hwe-5.4 | 5.4.0-187.207~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-ibm-5.4 | 5.4.0-1074.79~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-oracle-5.4 | 5.4.0-1126.135~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-raspi-5.4 | 5.4.0-1111.123~18.04.1 |
Vulnerabilities 3
-
High 7.8
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with…
-
High 7.8
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), o…
-
Medium 4.7
CVE-2024-2201
A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.