USN-6868-1

Details

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Netfilter; (CVE-2024-26925, CVE-2024-26643)

Affected Packages

Ubuntu:20.04:LTSlinux

Fixed in:

5.4.0-187.207

Ubuntu:20.04:LTSlinux-aws

Fixed in:

5.4.0-1127.137

Ubuntu:20.04:LTSlinux-azure

Fixed in:

5.4.0-1132.139

Ubuntu:20.04:LTSlinux-bluefield

Fixed in:

5.4.0-1087.94

Ubuntu:20.04:LTSlinux-gcp

Fixed in:

5.4.0-1131.140

Ubuntu:20.04:LTSlinux-gkeop

Fixed in:

5.4.0-1094.98

Ubuntu:20.04:LTSlinux-ibm

Fixed in:

5.4.0-1074.79

Ubuntu:20.04:LTSlinux-iot

Fixed in:

5.4.0-1039.40

Ubuntu:20.04:LTSlinux-kvm

Fixed in:

5.4.0-1115.122

Ubuntu:20.04:LTSlinux-oracle

Fixed in:

5.4.0-1126.135

Ubuntu:20.04:LTSlinux-raspi

Fixed in:

5.4.0-1111.123

Ubuntu:20.04:LTSlinux-xilinx-zynqmp

Fixed in:

5.4.0-1046.50

Ubuntu:Pro:18.04:LTSlinux-azure-5.4

Fixed in:

5.4.0-1132.139~18.04.1

Ubuntu:Pro:18.04:LTSlinux-hwe-5.4

Fixed in:

5.4.0-187.207~18.04.1

Ubuntu:Pro:18.04:LTSlinux-ibm-5.4

Fixed in:

5.4.0-1074.79~18.04.1

Ubuntu:Pro:18.04:LTSlinux-oracle-5.4

Fixed in:

5.4.0-1126.135~18.04.1

Ubuntu:Pro:18.04:LTSlinux-raspi-5.4

Fixed in:

5.4.0-1111.123~18.04.1

References

REPORThttps://ubuntu.com/security/CVE-2024-2201 REPORThttps://ubuntu.com/security/CVE-2024-26643 REPORThttps://ubuntu.com/security/CVE-2024-26925 ADVISORYhttps://ubuntu.com/security/notices/USN-6868-1

USN-6868-1

Details

Affected Packages

References

Upstream

Ecosystems

Timeline