Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- SuperH RISC architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- Drivers core;
- ATA over ethernet (AOE) driver;
- RAM backed block device driver;
- Network block device driver;
- Ublk userspace block driver;
- Compressed RAM block device driver;
- Bluetooth drivers;
- TPM device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DAX dirext access to differentiated memory framework;
- Buffer Sharing and Synchronization framework;
- EDAC drivers;
- FireWire subsystem;
- ARM SCMI message protocol;
- ARM SCPI message protocol;
- EFI core;
- Qualcomm firmware drivers;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- I2C subsystem;
- I3C subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- Multifunction device drivers;
- MMC subsystem;
- MTD block device drivers;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- STMicroelectronics network drivers;
- NTB driver;
- Virtio pmem driver;
- NVME drivers;
- Parport drivers;
- PCI subsystem;
- Alibaba DDR Sub-System Driveway PMU driver;
- PHY drivers;
- Pin controllers subsystem;
- x86 platform drivers;
- i.MX PM domains;
- Powercap sysfs driver;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- StarFive reset controller drivers;
- Real Time Clock drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- QCOM SoC drivers;
- Xilinx SoC drivers;
- SPI subsystem;
- Direct Digital Synthesis drivers;
- Media staging drivers;
- TCM subsystem;
- Thermal drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- UFS subsystem;
- USB Device Class drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- TI TPS6598x USB Power Delivery controller driver;
- USB Type-C Connector System Software Interface driver;
- vDPA drivers;
- VFIO drivers;
- Virtio Host (VHOST) subsystem;
- Framebuffer layer;
- Virtio drivers;
- Xen hypervisor drivers;
- AFS file system;
- BTRFS file system;
- File systems infrastructure;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- GFS2 file system;
- JFS file system;
- Network file systems library;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- Proc file system;
- SMB network file system;
- UBI file system;
- BPF subsystem;
- Network file system (NFS) superblock;
- Virtio network driver;
- Bluetooth subsystem;
- Network traffic control;
- Network sockets;
- TCP network protocol;
- Tracing infrastructure;
- User-space API (UAPI);
- Kernel init infrastructure;
- io_uring subsystem;
- IPC subsystem;
- Perf events;
- Kernel fork() syscall;
- Kernel thread helper (kthread);
- Padata parallel execution mechanism;
- RCU subsystem;
- Arbitrary resource management;
- Scheduler infrastructure;
- Signal handling mechanism;
- Static call mechanism;
- Task handling mechanism;
- Timer substystem drivers;
- Maple Tree data structure library;
- Memory management;
- 9P file system network protocol;
- Ethernet bridge;
- CAN network layer;
- Networking core;
- DCCP (Datagram Congestion Control Protocol);
- Distributed Switch Architecture;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- L2TP protocol;
- MAC80211 subsystem;
- IEEE 802.15.4 subsystem;
- Multipath TCP;
- NCSI (Network Controller Sideband Interface) driver;
- Netfilter;
- Netlink;
- RxRPC session sockets;
- SCTP protocol;
- SMC sockets;
- Sun RPC protocol;
- TIPC protocol;
- Unix domain sockets;
- VMware vSockets driver;
- Wireless networking;
- eXpress Data Path;
- XFRM subsystem;
- AppArmor security module;
- Integrity Measurement Architecture(IMA) framework;
- Key management;
- ALSA framework;
- FireWire sound drivers;
- AudioScience HPI driver;
- HD-audio driver;
- SoC Audio for Freescale CPUs drivers;
- Intel ASoC drivers;
- MediaTek ASoC drivers;
- QCOM ASoC drivers;
- SoC audio core drivers;
- STMicroelectronics SoC drivers;
- USB sound devices;
- KVM core;
(CVE-2024-50030, CVE-2024-47689, CVE-2024-50088, CVE-2024-50154,
CVE-2024-49994, CVE-2024-50243, CVE-2024-50284, CVE-2024-50207,
CVE-2024-53200, CVE-2024-53155, CVE-2024-50179, CVE-2024-50171,
CVE-2024-53167, CVE-2024-49885, CVE-2024-49869, CVE-2024-49934,
CVE-2024-53089, CVE-2024-50196, CVE-2024-53090, CVE-2024-47675,
CVE-2024-47690, CVE-2024-56674, CVE-2024-50082, CVE-2024-47742,
CVE-2024-53220, CVE-2024-50172, CVE-2024-50009, CVE-2024-49881,
CVE-2024-50249, CVE-2024-47752, CVE-2024-56707, CVE-2024-53105,
CVE-2024-53048, CVE-2024-50148, CVE-2024-50036, CVE-2024-53141,
CVE-2024-50213, CVE-2024-49911, CVE-2024-50285, CVE-2024-56535,
CVE-2024-49882, CVE-2024-50225, CVE-2024-50090, CVE-2024-53063,
CVE-2024-56703, CVE-2024-47687, CVE-2024-53079, CVE-2024-47744,
CVE-2024-50020, CVE-2024-53078, CVE-2024-53176, CVE-2
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.10 | linux-aws | 6.11.0-1009.10 |
| Ubuntu · 24.10 | linux-azure | 6.11.0-1009.9 |
| Ubuntu · 24.10 | linux-gcp | 6.11.0-1009.9 |
| Ubuntu · 24.10 | linux-oracle | 6.11.0-1011.12 |
| Ubuntu · 24.10 | linux-raspi | 6.11.0-1008.8 |
| Ubuntu · 24.10 | linux-realtime | 6.11.0-1005.5 |
References
-
report
https://ubuntu.com/security/CVE-2022-49034
-
report
https://ubuntu.com/security/CVE-2024-46869
-
report
https://ubuntu.com/security/CVE-2024-47671
-
report
https://ubuntu.com/security/CVE-2024-47675
-
report
https://ubuntu.com/security/CVE-2024-47676
-
report
https://ubuntu.com/security/CVE-2024-47677
-
report
https://ubuntu.com/security/CVE-2024-47678
-
report
https://ubuntu.com/security/CVE-2024-47679
-
report
https://ubuntu.com/security/CVE-2024-47680
-
report
https://ubuntu.com/security/CVE-2024-47681
-
report
https://ubuntu.com/security/CVE-2024-47682
-
report
https://ubuntu.com/security/CVE-2024-47684
-
report
https://ubuntu.com/security/CVE-2024-47685
-
report
https://ubuntu.com/security/CVE-2024-47686
-
report
https://ubuntu.com/security/CVE-2024-47687
-
report
https://ubuntu.com/security/CVE-2024-47688
-
report
https://ubuntu.com/security/CVE-2024-47689
-
report
https://ubuntu.com/security/CVE-2024-47690
-
report
https://ubuntu.com/security/CVE-2024-47691
-
report
https://ubuntu.com/security/CVE-2024-47692
-
report
https://ubuntu.com/security/CVE-2024-47693
-
report
https://ubuntu.com/security/CVE-2024-47694
-
report
https://ubuntu.com/security/CVE-2024-47695
-
report
https://ubuntu.com/security/CVE-2024-47696
-
report
https://ubuntu.com/security/CVE-2024-47697
-
report
https://ubuntu.com/security/CVE-2024-47698
-
report
https://ubuntu.com/security/CVE-2024-47699
-
report
https://ubuntu.com/security/CVE-2024-47700
-
report
https://ubuntu.com/security/CVE-2024-47701
-
report
https://ubuntu.com/security/CVE-2024-47702
-
report
https://ubuntu.com/security/CVE-2024-47703
-
report
https://ubuntu.com/security/CVE-2024-47704
-
report
https://ubuntu.com/security/CVE-2024-47705
-
report
https://ubuntu.com/security/CVE-2024-47706
-
report
https://ubuntu.com/security/CVE-2024-47707
-
report
https://ubuntu.com/security/CVE-2024-47708
-
report
https://ubuntu.com/security/CVE-2024-47709
-
report
https://ubuntu.com/security/CVE-2024-47710
-
report
https://ubuntu.com/security/CVE-2024-47711