Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- File systems infrastructure;
- Network traffic control;
(CVE-2024-46800, CVE-2024-43882)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | linux-aws-6.8 | 6.8.0-1019.21~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-azure-6.8 | 6.8.0-1018.21~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-oracle-6.8 | 6.8.0-1016.17~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-azure | 6.8.0-1018.21 |
Vulnerabilities 2
-
High 7.8
exec: Fix ToCToU between perm check and set-uid/gid usage
In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via do_filp_open(), permission checking is done against the file's metadata at that moment, and on succe…
-
High 7.8
sch/netem: fix use after free in netem_dequeue
In the Linux kernel, the following vulnerability has been resolved: sch/netem: fix use after free in netem_dequeue If netem_dequeue() enqueues packet to inner qdisc and that qdisc returns __NET_XMIT_STOLEN. The packet is dropped but qdisc_tree_reduce_backlog(…