Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystem:
- Netfilter;
(CVE-2024-26924, CVE-2024-26643)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux-lowlatency-hwe-5.15 | 5.15.0-113.123~20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux | 5.15.0-113.123 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gcp | 5.15.0-1063.71 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-lowlatency | 5.15.0-113.123 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-nvidia | 5.15.0-1059.60 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1031.35 |
Vulnerabilities 2
-
High 7.8
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with…
-
High 7.8
netfilter: nft_set_pipapo: do not free live element
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: do not free live element Pablo reports a crash with large batches of elements with a back-to-back add/remove pattern. Quoting Pablo: add_elem("00000000") timeout 10…