Summary
It was discovered that the AF_UNIX socket garbage collection implementation
in Ubuntu Noble's 6.8 kernel did not properly handle out-of-band (OOB)
messages, leading to a use-after-free vulnerability. An attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | linux-ibm-6.8 | 6.8.0-1036.36~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-nvidia-6.8 | 6.8.0-1038.41~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-ibm | 6.8.0-1036.36 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-nvidia | 6.8.0-1038.41 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1038.41.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | linux-raspi | 6.8.0-1038.42 |
References
-
report
https://launchpad.net/bugs/2121515