Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle element deactivation in certain cases, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1085)
Notselwyn discovered that the netfilter subsystem in the Linux kernel did not properly handle verdict parameters in certain cases, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1086)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - PWM drivers; (CVE-2024-26597, CVE-2024-26599)
{
"binaries": [
{
"binary_version": "6.5.0-1016.16~22.04.1",
"binary_name": "linux-buildinfo-6.5.0-1016-gcp"
},
{
"binary_version": "6.5.0-1016.16~22.04.1",
"binary_name": "linux-gcp-6.5-headers-6.5.0-1016"
},
{
"binary_version": "6.5.0-1016.16~22.04.1",
"binary_name": "linux-gcp-6.5-tools-6.5.0-1016"
},
{
"binary_version": "6.5.0-1016.16~22.04.1",
"binary_name": "linux-headers-6.5.0-1016-gcp"
},
{
"binary_version": "6.5.0-1016.16~22.04.1",
"binary_name": "linux-image-unsigned-6.5.0-1016-gcp"
},
{
"binary_version": "6.5.0-1016.16~22.04.1",
"binary_name": "linux-modules-6.5.0-1016-gcp"
},
{
"binary_version": "6.5.0-1016.16~22.04.1",
"binary_name": "linux-modules-extra-6.5.0-1016-gcp"
},
{
"binary_version": "6.5.0-1016.16~22.04.1",
"binary_name": "linux-modules-iwlwifi-6.5.0-1016-gcp"
},
{
"binary_version": "6.5.0-1016.16~22.04.1",
"binary_name": "linux-tools-6.5.0-1016-gcp"
}
],
"availability": "No subscription required"
}{
"ecosystem": "Ubuntu:22.04:LTS",
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-1085"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-1086"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-26597"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2024-26599"
}
]
}
{
"binaries": [
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-buildinfo-6.5.0-26-generic"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-buildinfo-6.5.0-26-generic-64k"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-cloud-tools-6.5.0-26-generic"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-headers-6.5.0-26-generic"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-headers-6.5.0-26-generic-64k"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-hwe-6.5-cloud-tools-6.5.0-26"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-hwe-6.5-cloud-tools-common"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-hwe-6.5-headers-6.5.0-26"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-hwe-6.5-tools-6.5.0-26"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-hwe-6.5-tools-common"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-hwe-6.5-tools-host"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-image-6.5.0-26-generic"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-image-unsigned-6.5.0-26-generic"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-image-unsigned-6.5.0-26-generic-64k"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-modules-6.5.0-26-generic"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-modules-6.5.0-26-generic-64k"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-modules-extra-6.5.0-26-generic"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-modules-ipu6-6.5.0-26-generic"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-modules-ivsc-6.5.0-26-generic"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-modules-iwlwifi-6.5.0-26-generic"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-source-6.5.0"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-tools-6.5.0-26-generic"
},
{
"binary_version": "6.5.0-26.26~22.04.1",
"binary_name": "linux-tools-6.5.0-26-generic-64k"
}
],
"availability": "No subscription required"
}{
"ecosystem": "Ubuntu:22.04:LTS",
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-1085"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-1086"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-26597"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2024-26599"
}
]
}
{
"binaries": [
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-buildinfo-6.5.0-26-lowlatency"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-buildinfo-6.5.0-26-lowlatency-64k"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-cloud-tools-6.5.0-26-lowlatency"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-headers-6.5.0-26-lowlatency"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-headers-6.5.0-26-lowlatency-64k"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-image-unsigned-6.5.0-26-lowlatency"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-image-unsigned-6.5.0-26-lowlatency-64k"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-6.5.0-26"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-common"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-lowlatency-hwe-6.5-headers-6.5.0-26"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-lowlatency-hwe-6.5-lib-rust-6.5.0-26-lowlatency"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-lowlatency-hwe-6.5-tools-6.5.0-26"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-lowlatency-hwe-6.5-tools-common"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-lowlatency-hwe-6.5-tools-host"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-modules-6.5.0-26-lowlatency"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-modules-6.5.0-26-lowlatency-64k"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-modules-iwlwifi-6.5.0-26-lowlatency"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-tools-6.5.0-26-lowlatency"
},
{
"binary_version": "6.5.0-26.26.1~22.04.1",
"binary_name": "linux-tools-6.5.0-26-lowlatency-64k"
}
],
"availability": "No subscription required"
}{
"ecosystem": "Ubuntu:22.04:LTS",
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-1085"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-1086"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-26597"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2024-26599"
}
]
}
{
"binaries": [
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-buildinfo-6.5.0-1018-oem"
},
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-headers-6.5.0-1018-oem"
},
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-image-unsigned-6.5.0-1018-oem"
},
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-modules-6.5.0-1018-oem"
},
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-modules-ipu6-6.5.0-1018-oem"
},
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-modules-ivsc-6.5.0-1018-oem"
},
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-modules-iwlwifi-6.5.0-1018-oem"
},
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-modules-usbio-6.5.0-1018-oem"
},
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-oem-6.5-headers-6.5.0-1018"
},
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-oem-6.5-lib-rust-6.5.0-1018-oem"
},
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-oem-6.5-tools-6.5.0-1018"
},
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-oem-6.5-tools-host"
},
{
"binary_version": "6.5.0-1018.19",
"binary_name": "linux-tools-6.5.0-1018-oem"
}
],
"availability": "No subscription required"
}{
"ecosystem": "Ubuntu:22.04:LTS",
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-1085"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-1086"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-26597"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2024-26599"
}
]
}
{
"binaries": [
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-buildinfo-6.5.0-1019-oracle"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-buildinfo-6.5.0-1019-oracle-64k"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-headers-6.5.0-1019-oracle"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-headers-6.5.0-1019-oracle-64k"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-image-unsigned-6.5.0-1019-oracle"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-image-unsigned-6.5.0-1019-oracle-64k"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-modules-6.5.0-1019-oracle"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-modules-6.5.0-1019-oracle-64k"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-modules-extra-6.5.0-1019-oracle"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-modules-extra-6.5.0-1019-oracle-64k"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-oracle-6.5-headers-6.5.0-1019"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-oracle-6.5-tools-6.5.0-1019"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-tools-6.5.0-1019-oracle"
},
{
"binary_version": "6.5.0-1019.19~22.04.1",
"binary_name": "linux-tools-6.5.0-1019-oracle-64k"
}
],
"availability": "No subscription required"
}{
"ecosystem": "Ubuntu:22.04:LTS",
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-1085"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-1086"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-26597"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2024-26599"
}
]
}
{
"binaries": [
{
"binary_version": "6.5.0-1010.11~22.04.1",
"binary_name": "linux-buildinfo-6.5.0-1010-starfive"
},
{
"binary_version": "6.5.0-1010.11~22.04.1",
"binary_name": "linux-headers-6.5.0-1010-starfive"
},
{
"binary_version": "6.5.0-1010.11~22.04.1",
"binary_name": "linux-image-6.5.0-1010-starfive"
},
{
"binary_version": "6.5.0-1010.11~22.04.1",
"binary_name": "linux-modules-6.5.0-1010-starfive"
},
{
"binary_version": "6.5.0-1010.11~22.04.1",
"binary_name": "linux-modules-extra-6.5.0-1010-starfive"
},
{
"binary_version": "6.5.0-1010.11~22.04.1",
"binary_name": "linux-starfive-6.5-headers-6.5.0-1010"
},
{
"binary_version": "6.5.0-1010.11~22.04.1",
"binary_name": "linux-starfive-6.5-tools-6.5.0-1010"
},
{
"binary_version": "6.5.0-1010.11~22.04.1",
"binary_name": "linux-tools-6.5.0-1010-starfive"
}
],
"availability": "No subscription required"
}{
"ecosystem": "Ubuntu:22.04:LTS",
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-1085"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-1086"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2024-26597"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2024-26599"
}
]
}