Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- File systems infrastructure;
- Network traffic control;
(CVE-2024-46800, CVE-2024-43882)
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gcp-6.8 | 6.8.0-1018.20~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-hwe-6.8 | 6.8.0-49.49~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-nvidia-6.8 | 6.8.0-1018.20~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux | 6.8.0-49.49 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-aws | 6.8.0-1019.21 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-gcp | 6.8.0-1018.20 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-gke | 6.8.0-1014.18 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-ibm | 6.8.0-1016.16 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-nvidia | 6.8.0-1018.20 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1018.20.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-oem-6.8 | 6.8.0-1017.17 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-oracle | 6.8.0-1016.17 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-raspi | 6.8.0-1015.17 |
Vulnerabilities 2
-
High 7.8
exec: Fix ToCToU between perm check and set-uid/gid usage
In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via do_filp_open(), permission checking is done against the file's metadata at that moment, and on succe…
-
High 7.8
sch/netem: fix use after free in netem_dequeue
In the Linux kernel, the following vulnerability has been resolved: sch/netem: fix use after free in netem_dequeue If netem_dequeue() enqueues packet to inner qdisc and that qdisc returns __NET_XMIT_STOLEN. The packet is dropped but qdisc_tree_reduce_backlog(…