Description: | Summary: The remote host is missing an update for the 'linux-azure, linux-azure-6.8' package(s) announced via the USN-7196-1 advisory.
Vulnerability Insight: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture, - MIPS architecture, - PowerPC architecture, - RISC-V architecture, - S390 architecture, - User-Mode Linux (UML), - x86 architecture, - Block layer subsystem, - Android drivers, - ATM drivers, - Drivers core, - Ublk userspace block driver, - Bluetooth drivers, - Character device driver, - Hardware crypto device drivers, - Buffer Sharing and Synchronization framework, - DMA engine subsystem, - Qualcomm firmware drivers, - GPIO subsystem, - GPU drivers, - HID subsystem, - Hardware monitoring drivers, - I2C subsystem, - I3C subsystem, - IIO subsystem, - InfiniBand drivers, - Input Device core drivers, - Input Device (Miscellaneous) drivers, - IOMMU subsystem, - IRQ chip drivers, - LED subsystem, - Mailbox framework, - Multiple devices driver, - Media drivers, - Fastrpc Driver, - VMware VMCI Driver, - MMC subsystem, - Ethernet bonding driver, - Network drivers, - Mellanox network drivers, - Microsoft Azure Network Adapter (MANA) driver, - Near Field Communication (NFC) drivers, - NVME drivers, - Device tree and open firmware driver, - Parport drivers, - PCI subsystem, - Pin controllers subsystem, - x86 platform drivers, - Power supply drivers, - Remote Processor subsystem, - S/390 drivers, - SCSI subsystem, - QCOM SoC drivers, - SPI subsystem, - Direct Digital Synthesis drivers, - Thunderbolt and USB4 drivers, - TTY drivers, - UFS subsystem, - Userspace I/O drivers, - DesignWare USB3 driver, - USB Gadget drivers, - USB Host Controller drivers, - USB Type-C Connector System Software Interface driver, - USB over IP driver, - Virtio Host (VHOST) subsystem, - Framebuffer layer, - Xen hypervisor drivers, - File systems infrastructure, - BTRFS file system, - Ext4 file system, - F2FS file system, - JFS file system, - Network file systems library, - Network file system (NFS) client, - Network file system (NFS) server daemon, - NILFS2 file system, - File system notification infrastructure, - NTFS3 file system, - Proc file system, - SMB network file system, - Tracing file system, - Bitmap API, - BPF subsystem, - Memory Management, - Objagg library, - Perf events, - Virtio network driver, - VMware vSockets driver, - KCM (Kernel Connection Multiplexor) sockets driver, - Control group (cgroup), - DMA mapping infrastructure, - Locking primitives, - Padata parallel execution mechanism, - Scheduler infrastructure, - Tracing infrastructure, - Radix Tree data structure library, - Kernel userspace event delivery library, - KUnit for arithmetic overflow checks, - Memory management, - Bluetooth subsystem, - Ethernet bridge, - CAN network layer, - Networking core, - Ethtool driver, - IPv4 ... [Please see the references for more information on the vulnerabilities]
Affected Software/OS: 'linux-azure, linux-azure-6.8' package(s) on Ubuntu 22.04, Ubuntu 24.04.
Solution: Please install the updated package(s).
CVSS Score: 9.0
CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
|