linux-oracle

Multiple security vulnerabilities were discovered in the Linux kernel for Oracle Cloud systems affecting subsystems including Ext4 file system, NFS server daemon, packet sockets, network traffic control, and VMware vSockets driver. These flaws could potentially allow an attacker to compromise the system. A security update correcting these issues is available and requires a system reboot and recompilation of third-party kernel modules due to an ABI change.

linux-oracle vulnerabilities (CVE-2024-57996)

linux-azure-nvidia

Multiple security vulnerabilities were discovered in the Linux kernel used in the linux-azure-nvidia package affecting numerous subsystems including various architectures, drivers, filesystems, and networking components. These issues could potentially allow an attacker to compromise the system. A security update addressing these flaws has been released, requiring a system reboot and recompilation of third-party kernel modules due to ABI changes.

linux-azure-nvidia vulnerabilities (CVE-2024-57996)

linux-azure-6.8

linux-azure

Multiple security vulnerabilities were discovered and fixed in the Linux kernel for Azure cloud systems, affecting numerous subsystems including architectures (ARM32, ARM64, x86), various device drivers, networking components, filesystems, memory management, and more. These flaws could potentially allow an attacker to compromise the system. Updates correcting these issues have been released for Ubuntu 22.04 LTS and 24.04 LTS Linux-azure kernels.

linux-azure, linux-azure-6.8 vulnerabilities (CVE-2024-57996)

linux-ibm-6.8

linux-ibm

Multiple security vulnerabilities were discovered in the Linux kernel affecting a wide range of subsystems and architectures including ARM32, ARM64, x86, various device drivers, networking components, and file systems. These flaws could potentially allow an attacker to compromise the affected system. Updates correcting these issues have been released for the linux-ibm-6.8 kernel packages. Users should apply the updates and reboot to ensure the fixes take effect.

linux-ibm, linux-ibm-6.8 vulnerabilities (CVE-2024-57996)

linux-aws-fips

linux-fips

linux-gcp-fips

Multiple security vulnerabilities were identified in the Linux kernel's network traffic control subsystem affecting FIPS-certified kernel packages for AWS, GCP, and generic Linux. These flaws could potentially allow an attacker to compromise the system. The issues are addressed by updates that require a system reboot and recompilation of third-party kernel modules due to ABI changes. Fixed versions have been released and are available through Ubuntu Pro updates.

linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities (CVE-2024-57996)

linux-aws-5.4

linux-gcp-5.4

linux-hwe-5.4

linux-ibm-5.4

linux-raspi-5.4

linux

linux-aws

linux-bluefield

linux-gcp

linux-iot

linux-kvm

linux-raspi

linux-xilinx-zynqmp

Multiple security vulnerabilities were discovered in the Linux kernel affecting the network traffic control subsystem. These flaws could potentially allow an attacker to compromise the system. The issues have been addressed in updated Linux kernel packages for various Ubuntu releases and platforms, including AWS, GCP, IBM cloud, Raspberry Pi, and others. Users are advised to apply the available patches and reboot their systems to complete the update process. Due to ABI changes, recompilation and reinstallation of third-party kernel modules may be necessary.

linux, linux-aws, linux-aws-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4,…

linux-gcp-6.8

linux-hwe-6.8

linux-nvidia-6.8

linux-gke

linux-gkeop

linux-nvidia

linux-nvidia-lowlatency

Multiple security vulnerabilities were discovered in the Linux kernel affecting subsystems such as the Overlay file system and Network traffic control. These flaws could potentially allow an attacker to compromise the system. The issues have been addressed in updated Linux kernel packages for various Ubuntu releases including 22.04 LTS and 24.04 LTS. Users are advised to apply the updates and reboot their systems to ensure the fixes are applied. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be required.

linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency,…

linux-raspi-realtime

linux-realtime

Multiple security vulnerabilities were identified in the Linux kernel, specifically affecting the Overlay file system and Network traffic control subsystems. These flaws could potentially allow an attacker to compromise affected systems. The vulnerabilities impact the linux-raspi-realtime kernel versions prior to 6.8.0-2029.30 and 6.8.1-1031.32, as well as several specific 6.7.0 and 6.8.0 builds. A patch has been released and is available through Ubuntu security updates. Users must reboot after updating and recompile any third-party kernel modules due to an ABI change.

linux-realtime, linux-raspi-realtime vulnerabilities (CVE-2024-57996)

linux-aws-6.8

linux-lowlatency-hwe-6.8

linux-oracle-6.8

linux-lowlatency

Multiple security vulnerabilities were identified in the Linux kernel affecting subsystems including the Overlay file system and Network traffic control. These issues could potentially allow an attacker to compromise affected systems. Fixes have been released for various Linux kernel packages, including linux-aws-6.8 and others, primarily for Ubuntu 22.04 LTS and 24.04 LTS. Users are advised to update to the fixed versions and reboot to apply the patches. Due to an ABI change, recompilation of third-party kernel modules may be required.

linux, linux-aws, linux-aws-6.8, linux-gcp, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8…

linux-lts-xenial

linux-aws-hwe

linux-hwe

linux-hwe-edge

linux-aws-5.0

linux-aws-5.3

linux-azure-4.15

linux-azure-5.3

linux-azure-5.4

linux-azure-edge

linux-gcp-4.15

linux-gcp-5.3

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-oracle-5.4

linux-azure-fips

linux-aws-5.11

linux-aws-5.13

linux-aws-5.15

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.15

linux-azure-5.8

linux-azure-fde

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.15

linux-gcp-5.8

linux-gke-5.15

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.15

linux-hwe-5.8

linux-ibm-5.15

linux-intel-5.13

linux-intel-iotg-5.15

linux-lowlatency-hwe-5.15

linux-nvidia-tegra-5.15

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.15

linux-oracle-5.8

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.15

linux-riscv-5.8

CVE-2024-57996 is a vulnerability in the Linux kernel's net_sched subsystem, specifically in the sch_sfq (Stochastic Fairness Queueing) implementation. The flaw arises because the kernel did not properly handle a limit of 1 packet, leading to an out-of-bounds array access and potential crash. This was triggered by a scenario where the queue length management underflows due to incorrect handling of packet limits. The issue was identified by syzkaller and fixed by adding a kernel-side check to disallow a 1 packet limit, aligning with iproute2's existing checks.

CVE-2024-57996: net_sched: sch_sfq: don't allow 1 packet limit in Linux kernel

Search: CVE-2024-57996