Skip to content
OpenAdvisories
High USN-6870-1 3 CVEs

linux-aws, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-oracle, linux-oracle-5.15 vulnerabilities

Published Jul 4, 2024 · Updated Aug 6, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the Intel Data Streaming and Intel Analytics
Accelerator drivers in the Linux kernel allowed direct access to the
devices for unprivileged users and virtual machines. A local attacker could
use this to cause a denial of service. (CVE-2024-21823)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystem:
- Netfilter;
(CVE-2024-26643, CVE-2024-26924)

Fixed packages 14

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS linux-azure-5.15 5.15.0-1067.76~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-azure-fde-5.15 5.15.0-1067.76~20.04.1.1
Ubuntu · 20.04 LTS 20.04:LTS linux-gkeop-5.15 5.15.0-1047.54~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-intel-iotg-5.15 5.15.0-1059.65~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-oracle-5.15 5.15.0-1062.68~20.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-aws 5.15.0-1064.70
Ubuntu · 22.04 LTS 22.04:LTS linux-azure 5.15.0-1067.76
Ubuntu · 22.04 LTS 22.04:LTS linux-azure-fde 5.15.0-1067.76.1
Ubuntu · 22.04 LTS 22.04:LTS linux-gke 5.15.0-1061.67
Ubuntu · 22.04 LTS 22.04:LTS linux-gkeop 5.15.0-1047.54
Ubuntu · 22.04 LTS 22.04:LTS linux-ibm 5.15.0-1057.60
Ubuntu · 22.04 LTS 22.04:LTS linux-intel-iotg 5.15.0-1059.65
Ubuntu · 22.04 LTS 22.04:LTS linux-kvm 5.15.0-1061.66
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle 5.15.0-1062.68

Vulnerabilities 3

  • High 7.8
    CVE-2024-26643

    netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26924

    netfilter: nft_set_pipapo: do not free live element

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: do not free live element Pablo reports a crash with large batches of elements with a back-to-back add/remove pattern. Quoting Pablo: add_elem("00000000") timeout 10…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-21823

    Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generatio…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2024-21823
  • report
    https://ubuntu.com/security/CVE-2024-26643
  • report
    https://ubuntu.com/security/CVE-2024-26924