Skip to content
OpenAdvisories
High USN-7167-1 3 CVEs

linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-ibm, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities

Published Dec 17, 2024 · Updated Oct 29, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Ext4 file system;
- Network traffic control;
- VMware vSockets driver;
(CVE-2024-50264, CVE-2024-49967, CVE-2024-53057)

Fixed packages 15

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux-aws-6.8 6.8.0-1021.23~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-gcp-6.8 6.8.0-1020.22~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia-6.8 6.8.0-1020.22~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle-6.8 6.8.0-1018.19~22.04.1
Ubuntu · 24.04 LTS 24.04:LTS linux 6.8.0-51.52
Ubuntu · 24.04 LTS 24.04:LTS linux-aws 6.8.0-1021.23
Ubuntu · 24.04 LTS 24.04:LTS linux-gcp 6.8.0-1020.22
Ubuntu · 24.04 LTS 24.04:LTS linux-gke 6.8.0-1016.20
Ubuntu · 24.04 LTS 24.04:LTS linux-gkeop 6.8.0-1003.5
Ubuntu · 24.04 LTS 24.04:LTS linux-ibm 6.8.0-1018.18
Ubuntu · 24.04 LTS 24.04:LTS linux-nvidia 6.8.0-1020.22
Ubuntu · 24.04 LTS 24.04:LTS linux-nvidia-lowlatency 6.8.0-1020.22.1
Ubuntu · 24.04 LTS 24.04:LTS linux-oem-6.8 6.8.0-1019.19
Ubuntu · 24.04 LTS 24.04:LTS linux-oracle 6.8.0-1018.19
Ubuntu · 24.04 LTS 24.04:LTS linux-raspi 6.8.0-1017.19

Vulnerabilities 3

  • High 7.8
    CVE-2024-50264

    vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans

    In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopback communication, a dangling pointer can be created in vsk->trans, potentially leading to a Use-After…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-53057

    net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT

    In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT In qdisc_tree_reduce_backlog, Qdiscs with major handle ffff: are assumed to be either root or ingress. This assumption is bogus since it…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-49967 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2024-49967
  • report
    https://ubuntu.com/security/CVE-2024-50264
  • report
    https://ubuntu.com/security/CVE-2024-53057