Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Netfilter;
- Network traffic control;
- VMware vSockets driver;
(CVE-2024-53164, CVE-2024-53103, CVE-2024-53141)
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gcp-6.8 | 6.8.0-1021.23~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-hwe-6.8 | 6.8.0-52.53~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-nvidia-6.8 | 6.8.0-1021.23~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-oracle-6.8 | 6.8.0-1019.20~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux | 6.8.0-52.53 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-azure | 6.8.0-1021.25 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-gcp | 6.8.0-1021.23 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-gke | 6.8.0-1017.21 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-gkeop | 6.8.0-1004.6 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-ibm | 6.8.0-1019.19 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-lowlatency | 6.8.0-52.53.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-nvidia | 6.8.0-1021.23 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1021.23.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-oracle | 6.8.0-1019.20 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-raspi | 6.8.0-1018.20 |
Vulnerabilities 3
-
High 7.8
hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
In the Linux kernel, the following vulnerability has been resolved: hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer When hvs is released, there is a possibility that vsk->trans may not be initialized to NULL, which could lead to a dangl…
-
High 7.8
netfilter: ipset: add missing range check in bitmap_ip_uadt
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip and ip_to are slightly swapped. Therefore…
-
High 7.8
net: sched: fix ordering of qlen adjustment
In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch->q.qlen around qdisc_tree_reduce_backlog() need to happen _before_ a call to said function because otherwise it may fail to notify p…