Skip to content
OpenAdvisories
High USN-7072-1 3 CVEs

linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi, linux-xilinx-zynqmp vulnerabilities

Published Oct 16, 2024 · Updated Oct 29, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Watchdog drivers;
- Netfilter;
- Network traffic control;
(CVE-2024-38630, CVE-2024-27397, CVE-2024-45016)

Fixed packages 20

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS linux-aws-5.15 5.15.0-1071.77~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-gcp-5.15 5.15.0-1070.78~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-gkeop-5.15 5.15.0-1054.61~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-hwe-5.15 5.15.0-124.134~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-ibm-5.15 5.15.0-1064.67~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-intel-iotg-5.15 5.15.0-1066.72~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-124.134~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-oracle-5.15 5.15.0-1069.75~20.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux 5.15.0-124.134
Ubuntu · 22.04 LTS 22.04:LTS linux-aws 5.15.0-1071.77
Ubuntu · 22.04 LTS 22.04:LTS linux-gcp 5.15.0-1070.78
Ubuntu · 22.04 LTS 22.04:LTS linux-gkeop 5.15.0-1054.61
Ubuntu · 22.04 LTS 22.04:LTS linux-ibm 5.15.0-1064.67
Ubuntu · 22.04 LTS 22.04:LTS linux-intel-iotg 5.15.0-1066.72
Ubuntu · 22.04 LTS 22.04:LTS linux-kvm 5.15.0-1068.73
Ubuntu · 22.04 LTS 22.04:LTS linux-lowlatency 5.15.0-124.134
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia 5.15.0-1066.67
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle 5.15.0-1069.75
Ubuntu · 22.04 LTS 22.04:LTS linux-raspi 5.15.0-1064.67
Ubuntu · 22.04 LTS 22.04:LTS linux-xilinx-zynqmp 5.15.0-1037.41

Vulnerabilities 3

  • High 7.8
    CVE-2024-27397

    netfilter: nf_tables: use timestamp to check for set element timeout

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use timestamp to check for set element timeout Add a timestamp field at the beginning of the transaction, store it in the nftables per-netns area. Update set backend .in…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-45016

    netem: fix return value if duplicate enqueue fails

    In the Linux kernel, the following vulnerability has been resolved: netem: fix return value if duplicate enqueue fails There is a bug in netem_enqueue() introduced by commit 5845f706388a ("net: netem: fix skb length BUG_ON in __skb_to_sgvec") that can lead to…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-38630

    watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger

    In the Linux kernel, the following vulnerability has been resolved: watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger When the cpu5wdt module is removing, the origin code uses del_timer() to de-activate the timer. If the timer handler is r…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2024-27397
  • report
    https://ubuntu.com/security/CVE-2024-38630
  • report
    https://ubuntu.com/security/CVE-2024-45016