Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- SMB network file system;
- Network namespace;
- Networking core;
(CVE-2024-56658, CVE-2024-35864, CVE-2024-26928)
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux | 5.4.0-212.232 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure | 5.4.0-1148.155 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-bluefield | 5.4.0-1102.109 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gcp | 5.4.0-1146.155 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-ibm | 5.4.0-1089.94 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-kvm | 5.4.0-1130.139 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle | 5.4.0-1141.151 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-xilinx-zynqmp | 5.4.0-1061.65 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-azure-5.4 | 5.4.0-1148.155~18.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | linux-oracle-5.4 | 5.4.0-1141.151~18.04.1 |
Vulnerabilities 3
-
Critical 9.8
smb: client: fix potential UAF in smb2_is_valid_lease_break()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_lease_break() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
-
High 7.8
net: defer final 'struct net' free in netns dismantle
In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dismantle Ilya reported a slab-use-after-free in dst_destroy [1] Issue is in xfrm6_net_init() and xfrm4_net_init() : They copy xfrm[46]_dst_ops_tem…
-
Unscored —
smb: client: fix potential UAF in cifs_debug_files_proc_show()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_debug_files_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.