USN-7089-7: Linux kernel (Low Latency) vulnerabilities

USN-7089-7: Linux kernel (Low Latency) vulnerabilities
19 November 2024

Several security issues were fixed in the Linux kernel.

Releases
Ubuntu 24.04 LTS Ubuntu 22.04 LTS

Packages
linux-lowlatency - Linux low latency kernel
linux-lowlatency-hwe-6.8 - Linux low latency kernel

Details
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux
kernel did not properly check for the device to be enabled before
writing. A local attacker could possibly use this to cause a denial of
service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

ARM32 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Cryptographic API;
Serial ATA and Parallel ATA drivers;
Null block device driver;
Bluetooth drivers;
Cdrom driver;
Clock framework and drivers;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Cirrus firmware drivers;
GPIO subsystem;
GPU drivers;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
ISDN/mISDN subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
Network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Near Field Communication (NFC) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
S/390 drivers;
SCSI drivers;
Thermal drivers;
TTY drivers;
UFS subsystem;
USB DSL drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
VFIO drivers;
VHOST drivers;
File systems infrastructure;
BTRFS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system client;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Memory management;
Netfilter;
Tracing infrastructure;
io_uring subsystem;
BPF subsystem;
Core kernel;
Bluetooth subsystem;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Network traffic control;
Sun RPC protocol;
Wireless networking;
AMD SoC Alsa drivers;
SoC Audio for Freescale CPUs drivers;
MediaTek ASoC drivers;
SoC audio core drivers;
SOF drivers;
Sound sequencer drivers;

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.04

• linux-image-6.8.0-48-lowlatency - 6.8.0-48.48.3
• linux-image-6.8.0-48-lowlatency-64k - 6.8.0-48.48.3
• linux-image-lowlatency - 6.8.0-48.48.3
• linux-image-lowlatency-64k - 6.8.0-48.48.3
• linux-image-lowlatency-64k-hwe-24.04 - 6.8.0-48.48.3
• linux-image-lowlatency-hwe-24.04 - 6.8.0-48.48.3

After a standard system update you need to reboot your computer to make all the necessary changes.