Summary
It was discovered that the AF_UNIX socket garbage collection implementation
in Ubuntu Noble's 6.8 kernel did not properly handle out-of-band (OOB)
messages, leading to a use-after-free vulnerability. An attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | linux-hwe-6.8 | 6.8.0-83.83~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-83.83.1~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux | 6.8.0-83.83 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-aws | 6.8.0-1038.40 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-gcp | 6.8.0-1039.41 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-gke | 6.8.0-1035.39 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-gkeop | 6.8.0-1022.24 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-lowlatency | 6.8.0-83.83.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-oracle | 6.8.0-1035.36 |
References
-
report
https://launchpad.net/bugs/2121515