Skip to content
OpenAdvisories
High USN-6975-1 2 CVEs

linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-lowlatency, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-raspi vulnerabilities

Published Aug 21, 2024 · Updated Oct 23, 2026

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- User-Mode Linux (UML);
- MMC subsystem;
(CVE-2024-39292, CVE-2024-39484)

Fixed packages 13

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia-6.8 6.8.0-1012.12~22.04.1
Ubuntu · 24.04 LTS 24.04:LTS linux 6.8.0-41.41
Ubuntu · 24.04 LTS 24.04:LTS linux-aws 6.8.0-1014.15
Ubuntu · 24.04 LTS 24.04:LTS linux-azure 6.8.0-1013.15
Ubuntu · 24.04 LTS 24.04:LTS linux-gcp 6.8.0-1013.14
Ubuntu · 24.04 LTS 24.04:LTS linux-gke 6.8.0-1009.12
Ubuntu · 24.04 LTS 24.04:LTS linux-ibm 6.8.0-1011.11
Ubuntu · 24.04 LTS 24.04:LTS linux-lowlatency 6.8.0-41.41.1
Ubuntu · 24.04 LTS 24.04:LTS linux-nvidia 6.8.0-1012.12
Ubuntu · 24.04 LTS 24.04:LTS linux-nvidia-lowlatency 6.8.0-1012.12.1
Ubuntu · 24.04 LTS 24.04:LTS linux-oem-6.8 6.8.0-1011.11
Ubuntu · 24.04 LTS 24.04:LTS linux-oracle 6.8.0-1011.11
Ubuntu · 24.04 LTS 24.04:LTS linux-raspi 6.8.0-1010.11

Vulnerabilities 2

  • High 7.8

    um: Add winch to winch_handlers before registering winch IRQ

    In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winch_handlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winch_handlers list. If that happens, reg…

  • Unscored —

    mmc: davinci: Don't strip remove function when driver is builtin

    In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: Don't strip remove function when driver is builtin Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a dev…

References

  • report
    https://ubuntu.com/security/CVE-2024-39292
  • report
    https://ubuntu.com/security/CVE-2024-39484