Summary
A security issues was discovered in the Linux kernel.
An attacker could possibly use this to compromise the system.
This update corrects flaws in the following subsystems:
- Block layer subsystem;
(CVE-2024-56672)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux-lowlatency-hwe-5.15 | 5.15.0-134.145~20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux | 5.15.0-134.145 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-lowlatency | 5.15.0-134.145 |
Vulnerabilities 1
-
High 7.8
blk-cgroup: Fix UAF in blkcg_unpin_online()
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcg_unpin_online() blkcg_unpin_online() walks up the blkcg hierarchy putting the online pin. To walk up, it uses blkcg_parent(blkcg) but it was calling that after blk…
References
-
report
https://ubuntu.com/security/CVE-2024-56672