Skip to content
OpenAdvisories
High USN-7235-1 3 CVEs

linux, linux-azure, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

Published Jan 28, 2025 · Updated Oct 29, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Netfilter;
- Network traffic control;
- VMware vSockets driver;
(CVE-2024-53164, CVE-2024-53103, CVE-2024-53141)

Fixed packages 18

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS linux-gcp-5.15 5.15.0-1075.84~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-hwe-5.15 5.15.0-131.141~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-ibm-5.15 5.15.0-1069.72~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-intel-iotg-5.15 5.15.0-1072.78~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-131.141~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-oracle-5.15 5.15.0-1074.80~20.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux 5.15.0-131.141
Ubuntu · 22.04 LTS 22.04:LTS linux-azure 5.15.0-1079.88
Ubuntu · 22.04 LTS 22.04:LTS linux-gcp 5.15.0-1075.84
Ubuntu · 22.04 LTS 22.04:LTS linux-gke 5.15.0-1073.79
Ubuntu · 22.04 LTS 22.04:LTS linux-gkeop 5.15.0-1059.67
Ubuntu · 22.04 LTS 22.04:LTS linux-ibm 5.15.0-1069.72
Ubuntu · 22.04 LTS 22.04:LTS linux-intel-iotg 5.15.0-1072.78
Ubuntu · 22.04 LTS 22.04:LTS linux-kvm 5.15.0-1073.78
Ubuntu · 22.04 LTS 22.04:LTS linux-lowlatency 5.15.0-131.141
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia 5.15.0-1071.72
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle 5.15.0-1074.80
Ubuntu · 22.04 LTS 22.04:LTS linux-raspi 5.15.0-1071.74

Vulnerabilities 3

  • High 7.8
    CVE-2024-53103

    hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer

    In the Linux kernel, the following vulnerability has been resolved: hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer When hvs is released, there is a possibility that vsk->trans may not be initialized to NULL, which could lead to a dangl…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-53141

    netfilter: ipset: add missing range check in bitmap_ip_uadt

    In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip and ip_to are slightly swapped. Therefore…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-53164

    net: sched: fix ordering of qlen adjustment

    In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch->q.qlen around qdisc_tree_reduce_backlog() need to happen _before_ a call to said function because otherwise it may fail to notify p…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2024-53103
  • report
    https://ubuntu.com/security/CVE-2024-53141
  • report
    https://ubuntu.com/security/CVE-2024-53164