GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
usn-7007-1
Vulnerability from osv_ubuntu
Published
2024-09-13 09:38
Modified
2026-08-05 23:35
Summary
linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-oracle, linux-raspi vulnerabilities
Details

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-40902)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - M68K architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Accessibility subsystem; - ACPI drivers; - Serial ATA and Parallel ATA drivers; - Drivers core; - Bluetooth drivers; - Character device driver; - CPU frequency scaling framework; - Hardware crypto device drivers; - Buffer Sharing and Synchronization framework; - DMA engine subsystem; - FPGA Framework; - GPIO subsystem; - GPU drivers; - Greybus drivers; - HID subsystem; - HW tracing; - I2C subsystem; - IIO subsystem; - InfiniBand drivers; - Input Device (Mouse) drivers; - Macintosh device drivers; - Multiple devices driver; - Media drivers; - VMware VMCI Driver; - Network drivers; - Near Field Communication (NFC) drivers; - NVME drivers; - Pin controllers subsystem; - PTP clock framework; - S/390 drivers; - SCSI drivers; - SoundWire subsystem; - Greybus lights staging drivers; - Media staging drivers; - Thermal drivers; - TTY drivers; - USB subsystem; - DesignWare USB3 driver; - Framebuffer layer; - ACRN Hypervisor Service Module driver; - eCrypt file system; - File systems infrastructure; - Ext4 file system; - F2FS file system; - JFFS2 file system; - JFS file system; - NILFS2 file system; - NTFS3 file system; - SMB network file system; - IOMMU subsystem; - Memory management; - Netfilter; - BPF subsystem; - Kernel debugger infrastructure; - DMA mapping infrastructure; - IRQ subsystem; - Tracing infrastructure; - 9P file system network protocol; - B.A.T.M.A.N. meshing protocol; - CAN network layer; - Ceph Core library; - Networking core; - IPv4 networking; - IPv6 networking; - IUCV driver; - MAC80211 subsystem; - Multipath TCP; - NET/ROM layer; - NFC subsystem; - Open vSwitch; - Network traffic control; - TIPC protocol; - TLS protocol; - Unix domain sockets; - Wireless networking; - XFRM subsystem; - ALSA framework; - SoC Audio for Freescale CPUs drivers; - Kirkwood ASoC drivers; (CVE-2024-40961, CVE-2024-38597, CVE-2024-39468, CVE-2024-36978, CVE-2024-42161, CVE-2024-38573, CVE-2024-40905, CVE-2024-42094, CVE-2024-36894, CVE-2024-40914, CVE-2024-40956, CVE-2024-42106, CVE-2024-38610, CVE-2024-39506, CVE-2024-42098, CVE-2024-42232, CVE-2024-38590, CVE-2024-39488, CVE-2024-42127, CVE-2024-41006, CVE-2024-42131, CVE-2024-41005, CVE-2024-40963, CVE-2024-38559, CVE-2024-42130, CVE-2024-37078, CVE-2024-42082, CVE-2024-40984, CVE-2024-38560, CVE-2024-42090, CVE-2024-33621, CVE-2024-40974, CVE-2024-42115, CVE-2024-40971, CVE-2024-40943, CVE-2024-38627, CVE-2024-38548, CVE-2024-40934, CVE-2024-38579, CVE-2024-38558, CVE-2024-39495, CVE-2023-52884, CVE-2024-42225, CVE-2024-38659, CVE-2024-40927, CVE-2024-40967, CVE-2024-38624, CVE-2024-38583, CVE-2024-41047, CVE-2024-38623, CVE-2024-39509, CVE-2024-36971, CVE-2024-42120, CVE-2024-38589, CVE-2024-36270, CVE-2024-42105, CVE-2024-36032, CVE-2024-42101, CVE-2024-40908, CVE-2024-42089, CVE-2024-39482, CVE-2024-38662, CVE-2024-41007, CVE-2024-38635, CVE-2023-52887, CVE-2024-40912, CVE-2024-41027, CVE-2024-38598, CVE-2024-38381, CVE-2024-39503, CVE-2024-39301, CVE-2024-40988, CVE-2024-41000, CVE-2024-39507, CVE-2024-35247, CVE-2024-39277, CVE-2024-42229, CVE-2024-42085, CVE-2024-35927, CVE-2024-42224, CVE-2024-38567, CVE-2024-42097, CVE-2024-41049, CVE-2024-39466, CVE-2024-40957, CVE-2024-40978, CVE-2024-42093, CVE-2024-40937, CVE-2024-41034, CVE-2024-41048, CVE-2024-39471, CVE-2024-39502, CVE-2024-38555, CVE-2024-40970, CVE-2024-36972, CVE-2024-40995, CVE-2024-42154, CVE-2024-40916, CVE-2024-39505, CVE-2024-39475, CVE-2024-38599, CVE-2024-38596, CVE-2024-39493, CVE-2024-42124, CVE-2024-38549, CVE-2024-42084, CVE-2024-40942, CVE-2024-42077, CVE-2024-42152, CVE-2024-40904, CVE-2024-31076, CVE-2024-40960, CVE-2024-41035, CVE-2024-40945, CVE-2024-38605, CVE-2024-42140, CVE-2024-41041, CVE-2024-36014, CVE-2024-38612, CVE-2024-41092, CVE-2024-38546, CVE-2024-40902, CVE-2024-42068, CVE-2024-42121, CVE-2024-42236, CVE-2024-34777, CVE-2024-39467, CVE-2024-42087, CVE-2024-39501, CVE-2024-40980, CVE-2024-38550, CVE-2024-42223, CVE-2024-38607, CVE-2024-42247, CVE-2024-41046, CVE-2024-42080, CVE-2024-40901, CVE-2024-38571, CVE-2024-39480, CVE-2024-42070, CVE-2024-41093, CVE-2024-42148, CVE-2024-38601, CVE-2024-39500, CVE-2024-41097, CVE-2024-38565, CVE-2024-38661, CVE-2024-38615, CVE-2024-41040, CVE-2024-34027, CVE-2024-37356, CVE-2024-42157, CVE-2024-40941, CVE-2024-38634, CVE-2024-41004, CVE-2024-38780, CVE-2024-38552, CVE-2024-39276, CVE-2024-38618, CVE-2024-38588, CVE-2024-42086, CVE-2024-41087, CVE-2024-38582, CVE-2024-40932, CVE-2024-39489, CVE-2024-40968, CVE-2024-42119, CVE-2024-42137, CVE-2024-40929, CVE-2024-38591, CVE-2024-36489, CVE-2022-48772, CVE-2024-42153, CVE-2024-40959, CVE-2024-40987, CVE-2024-36015, CVE-2024-41044, CVE-2024-41002, CVE-2024-42109, CVE-2024-38587, CVE-2024-36286, CVE-2024-41055, CVE-2024-39469, CVE-2024-39487, CVE-2024-38580, CVE-2024-38619, CVE-2024-38613, CVE-2024-42145, CVE-2024-41095, CVE-2024-40958, CVE-2024-40911, CVE-2024-42102, CVE-2024-33847, CVE-2024-36974, CVE-2024-40994, CVE-2024-38633, CVE-2024-40981, CVE-2024-40983, CVE-2024-42096, CVE-2024-42104, CVE-2024-42092, CVE-2024-40954, CVE-2024-38637, CVE-2024-42240, CVE-2024-38621, CVE-2024-38578, CVE-2024-38547, CVE-2024-39490, CVE-2024-42076, CVE-2024-42244, CVE-2024-39499, CVE-2024-38586, CVE-2024-41089, CVE-2024-40976, CVE-2024-42095, CVE-2024-40931, CVE-2024-40990)

References
https://ubuntu.com/security/notices/USN-7007-1 ADVISORY
https://ubuntu.com/security/CVE-2022-48772 REPORT
https://ubuntu.com/security/CVE-2023-52884 REPORT
https://ubuntu.com/security/CVE-2023-52887 REPORT
https://ubuntu.com/security/CVE-2024-23848 REPORT
https://ubuntu.com/security/CVE-2024-25741 REPORT
https://ubuntu.com/security/CVE-2024-31076 REPORT
https://ubuntu.com/security/CVE-2024-33621 REPORT
https://ubuntu.com/security/CVE-2024-33847 REPORT
https://ubuntu.com/security/CVE-2024-34027 REPORT
https://ubuntu.com/security/CVE-2024-34777 REPORT
https://ubuntu.com/security/CVE-2024-35247 REPORT
https://ubuntu.com/security/CVE-2024-35927 REPORT
https://ubuntu.com/security/CVE-2024-36014 REPORT
https://ubuntu.com/security/CVE-2024-36015 REPORT
https://ubuntu.com/security/CVE-2024-36032 REPORT
https://ubuntu.com/security/CVE-2024-36270 REPORT
https://ubuntu.com/security/CVE-2024-36286 REPORT
https://ubuntu.com/security/CVE-2024-36489 REPORT
https://ubuntu.com/security/CVE-2024-36894 REPORT
https://ubuntu.com/security/CVE-2024-36971 REPORT
https://ubuntu.com/security/CVE-2024-36972 REPORT
https://ubuntu.com/security/CVE-2024-36974 REPORT
https://ubuntu.com/security/CVE-2024-36978 REPORT
https://ubuntu.com/security/CVE-2024-37078 REPORT
https://ubuntu.com/security/CVE-2024-37356 REPORT
https://ubuntu.com/security/CVE-2024-38381 REPORT
https://ubuntu.com/security/CVE-2024-38546 REPORT
https://ubuntu.com/security/CVE-2024-38547 REPORT
https://ubuntu.com/security/CVE-2024-38548 REPORT
https://ubuntu.com/security/CVE-2024-38549 REPORT
https://ubuntu.com/security/CVE-2024-38550 REPORT
https://ubuntu.com/security/CVE-2024-38552 REPORT
https://ubuntu.com/security/CVE-2024-38555 REPORT
https://ubuntu.com/security/CVE-2024-38558 REPORT
https://ubuntu.com/security/CVE-2024-38559 REPORT
https://ubuntu.com/security/CVE-2024-38560 REPORT
https://ubuntu.com/security/CVE-2024-38565 REPORT
https://ubuntu.com/security/CVE-2024-38567 REPORT
https://ubuntu.com/security/CVE-2024-38571 REPORT
https://ubuntu.com/security/CVE-2024-38573 REPORT
https://ubuntu.com/security/CVE-2024-38578 REPORT
https://ubuntu.com/security/CVE-2024-38579 REPORT
https://ubuntu.com/security/CVE-2024-38580 REPORT
https://ubuntu.com/security/CVE-2024-38582 REPORT
https://ubuntu.com/security/CVE-2024-38583 REPORT
https://ubuntu.com/security/CVE-2024-38586 REPORT
https://ubuntu.com/security/CVE-2024-38587 REPORT
https://ubuntu.com/security/CVE-2024-38588 REPORT
https://ubuntu.com/security/CVE-2024-38589 REPORT
https://ubuntu.com/security/CVE-2024-38590 REPORT
https://ubuntu.com/security/CVE-2024-38591 REPORT
https://ubuntu.com/security/CVE-2024-38596 REPORT
https://ubuntu.com/security/CVE-2024-38597 REPORT
https://ubuntu.com/security/CVE-2024-38598 REPORT
https://ubuntu.com/security/CVE-2024-38599 REPORT
https://ubuntu.com/security/CVE-2024-38601 REPORT
https://ubuntu.com/security/CVE-2024-38605 REPORT
https://ubuntu.com/security/CVE-2024-38607 REPORT
https://ubuntu.com/security/CVE-2024-38610 REPORT
https://ubuntu.com/security/CVE-2024-38612 REPORT
https://ubuntu.com/security/CVE-2024-38613 REPORT
https://ubuntu.com/security/CVE-2024-38615 REPORT
https://ubuntu.com/security/CVE-2024-38618 REPORT
https://ubuntu.com/security/CVE-2024-38619 REPORT
https://ubuntu.com/security/CVE-2024-38621 REPORT
https://ubuntu.com/security/CVE-2024-38623 REPORT
https://ubuntu.com/security/CVE-2024-38624 REPORT
https://ubuntu.com/security/CVE-2024-38627 REPORT
https://ubuntu.com/security/CVE-2024-38633 REPORT
https://ubuntu.com/security/CVE-2024-38634 REPORT
https://ubuntu.com/security/CVE-2024-38635 REPORT
https://ubuntu.com/security/CVE-2024-38637 REPORT
https://ubuntu.com/security/CVE-2024-38659 REPORT
https://ubuntu.com/security/CVE-2024-38661 REPORT
https://ubuntu.com/security/CVE-2024-38662 REPORT
https://ubuntu.com/security/CVE-2024-38780 REPORT
https://ubuntu.com/security/CVE-2024-39276 REPORT
https://ubuntu.com/security/CVE-2024-39277 REPORT
https://ubuntu.com/security/CVE-2024-39301 REPORT
https://ubuntu.com/security/CVE-2024-39466 REPORT
https://ubuntu.com/security/CVE-2024-39467 REPORT
https://ubuntu.com/security/CVE-2024-39468 REPORT
https://ubuntu.com/security/CVE-2024-39469 REPORT
https://ubuntu.com/security/CVE-2024-39471 REPORT
https://ubuntu.com/security/CVE-2024-39475 REPORT
https://ubuntu.com/security/CVE-2024-39480 REPORT
https://ubuntu.com/security/CVE-2024-39482 REPORT
https://ubuntu.com/security/CVE-2024-39487 REPORT
https://ubuntu.com/security/CVE-2024-39488 REPORT
https://ubuntu.com/security/CVE-2024-39489 REPORT
https://ubuntu.com/security/CVE-2024-39490 REPORT
https://ubuntu.com/security/CVE-2024-39493 REPORT
https://ubuntu.com/security/CVE-2024-39495 REPORT
https://ubuntu.com/security/CVE-2024-39499 REPORT
https://ubuntu.com/security/CVE-2024-39500 REPORT
https://ubuntu.com/security/CVE-2024-39501 REPORT
https://ubuntu.com/security/CVE-2024-39502 REPORT
https://ubuntu.com/security/CVE-2024-39503 REPORT
https://ubuntu.com/security/CVE-2024-39505 REPORT
https://ubuntu.com/security/CVE-2024-39506 REPORT
https://ubuntu.com/security/CVE-2024-39507 REPORT
https://ubuntu.com/security/CVE-2024-39509 REPORT
https://ubuntu.com/security/CVE-2024-40901 REPORT
https://ubuntu.com/security/CVE-2024-40902 REPORT
https://ubuntu.com/security/CVE-2024-40904 REPORT
https://ubuntu.com/security/CVE-2024-40905 REPORT
https://ubuntu.com/security/CVE-2024-40908 REPORT
https://ubuntu.com/security/CVE-2024-40911 REPORT
https://ubuntu.com/security/CVE-2024-40912 REPORT
https://ubuntu.com/security/CVE-2024-40914 REPORT
https://ubuntu.com/security/CVE-2024-40916 REPORT
https://ubuntu.com/security/CVE-2024-40927 REPORT
https://ubuntu.com/security/CVE-2024-40929 REPORT
https://ubuntu.com/security/CVE-2024-40931 REPORT
https://ubuntu.com/security/CVE-2024-40932 REPORT
https://ubuntu.com/security/CVE-2024-40934 REPORT
https://ubuntu.com/security/CVE-2024-40937 REPORT
https://ubuntu.com/security/CVE-2024-40941 REPORT
https://ubuntu.com/security/CVE-2024-40942 REPORT
https://ubuntu.com/security/CVE-2024-40943 REPORT
https://ubuntu.com/security/CVE-2024-40945 REPORT
https://ubuntu.com/security/CVE-2024-40954 REPORT
https://ubuntu.com/security/CVE-2024-40956 REPORT
https://ubuntu.com/security/CVE-2024-40957 REPORT
https://ubuntu.com/security/CVE-2024-40958 REPORT
https://ubuntu.com/security/CVE-2024-40959 REPORT
https://ubuntu.com/security/CVE-2024-40960 REPORT
https://ubuntu.com/security/CVE-2024-40961 REPORT
https://ubuntu.com/security/CVE-2024-40963 REPORT
https://ubuntu.com/security/CVE-2024-40967 REPORT
https://ubuntu.com/security/CVE-2024-40968 REPORT
https://ubuntu.com/security/CVE-2024-40970 REPORT
https://ubuntu.com/security/CVE-2024-40971 REPORT
https://ubuntu.com/security/CVE-2024-40974 REPORT
https://ubuntu.com/security/CVE-2024-40976 REPORT
https://ubuntu.com/security/CVE-2024-40978 REPORT
https://ubuntu.com/security/CVE-2024-40980 REPORT
https://ubuntu.com/security/CVE-2024-40981 REPORT
https://ubuntu.com/security/CVE-2024-40983 REPORT
https://ubuntu.com/security/CVE-2024-40984 REPORT
https://ubuntu.com/security/CVE-2024-40987 REPORT
https://ubuntu.com/security/CVE-2024-40988 REPORT
https://ubuntu.com/security/CVE-2024-40990 REPORT
https://ubuntu.com/security/CVE-2024-40994 REPORT
https://ubuntu.com/security/CVE-2024-40995 REPORT
https://ubuntu.com/security/CVE-2024-41000 REPORT
https://ubuntu.com/security/CVE-2024-41002 REPORT
https://ubuntu.com/security/CVE-2024-41004 REPORT
https://ubuntu.com/security/CVE-2024-41005 REPORT
https://ubuntu.com/security/CVE-2024-41006 REPORT
https://ubuntu.com/security/CVE-2024-41007 REPORT
https://ubuntu.com/security/CVE-2024-41027 REPORT
https://ubuntu.com/security/CVE-2024-41034 REPORT
https://ubuntu.com/security/CVE-2024-41035 REPORT
https://ubuntu.com/security/CVE-2024-41040 REPORT
https://ubuntu.com/security/CVE-2024-41041 REPORT
https://ubuntu.com/security/CVE-2024-41044 REPORT
https://ubuntu.com/security/CVE-2024-41046 REPORT
https://ubuntu.com/security/CVE-2024-41047 REPORT
https://ubuntu.com/security/CVE-2024-41048 REPORT
https://ubuntu.com/security/CVE-2024-41049 REPORT
https://ubuntu.com/security/CVE-2024-41055 REPORT
https://ubuntu.com/security/CVE-2024-41087 REPORT
https://ubuntu.com/security/CVE-2024-41089 REPORT
https://ubuntu.com/security/CVE-2024-41092 REPORT
https://ubuntu.com/security/CVE-2024-41093 REPORT
https://ubuntu.com/security/CVE-2024-41095 REPORT
https://ubuntu.com/security/CVE-2024-41097 REPORT
https://ubuntu.com/security/CVE-2024-42068 REPORT
https://ubuntu.com/security/CVE-2024-42070 REPORT
https://ubuntu.com/security/CVE-2024-42076 REPORT
https://ubuntu.com/security/CVE-2024-42077 REPORT
https://ubuntu.com/security/CVE-2024-42080 REPORT
https://ubuntu.com/security/CVE-2024-42082 REPORT
https://ubuntu.com/security/CVE-2024-42084 REPORT
https://ubuntu.com/security/CVE-2024-42085 REPORT
https://ubuntu.com/security/CVE-2024-42086 REPORT
https://ubuntu.com/security/CVE-2024-42087 REPORT
https://ubuntu.com/security/CVE-2024-42089 REPORT
https://ubuntu.com/security/CVE-2024-42090 REPORT
https://ubuntu.com/security/CVE-2024-42092 REPORT
https://ubuntu.com/security/CVE-2024-42093 REPORT
https://ubuntu.com/security/CVE-2024-42094 REPORT
https://ubuntu.com/security/CVE-2024-42095 REPORT
https://ubuntu.com/security/CVE-2024-42096 REPORT
https://ubuntu.com/security/CVE-2024-42097 REPORT
https://ubuntu.com/security/CVE-2024-42098 REPORT
https://ubuntu.com/security/CVE-2024-42101 REPORT
https://ubuntu.com/security/CVE-2024-42102 REPORT
https://ubuntu.com/security/CVE-2024-42104 REPORT
https://ubuntu.com/security/CVE-2024-42105 REPORT
https://ubuntu.com/security/CVE-2024-42106 REPORT
https://ubuntu.com/security/CVE-2024-42109 REPORT
https://ubuntu.com/security/CVE-2024-42115 REPORT
https://ubuntu.com/security/CVE-2024-42119 REPORT
https://ubuntu.com/security/CVE-2024-42120 REPORT
https://ubuntu.com/security/CVE-2024-42121 REPORT
https://ubuntu.com/security/CVE-2024-42124 REPORT
https://ubuntu.com/security/CVE-2024-42127 REPORT
https://ubuntu.com/security/CVE-2024-42130 REPORT
https://ubuntu.com/security/CVE-2024-42131 REPORT
https://ubuntu.com/security/CVE-2024-42137 REPORT
https://ubuntu.com/security/CVE-2024-42140 REPORT
https://ubuntu.com/security/CVE-2024-42145 REPORT
https://ubuntu.com/security/CVE-2024-42148 REPORT
https://ubuntu.com/security/CVE-2024-42152 REPORT
https://ubuntu.com/security/CVE-2024-42153 REPORT
https://ubuntu.com/security/CVE-2024-42154 REPORT
https://ubuntu.com/security/CVE-2024-42157 REPORT
https://ubuntu.com/security/CVE-2024-42161 REPORT
https://ubuntu.com/security/CVE-2024-42223 REPORT
https://ubuntu.com/security/CVE-2024-42224 REPORT
https://ubuntu.com/security/CVE-2024-42225 REPORT
https://ubuntu.com/security/CVE-2024-42229 REPORT
https://ubuntu.com/security/CVE-2024-42232 REPORT
https://ubuntu.com/security/CVE-2024-42236 REPORT
https://ubuntu.com/security/CVE-2024-42240 REPORT
https://ubuntu.com/security/CVE-2024-42244 REPORT
https://ubuntu.com/security/CVE-2024-42247 REPORT

Loading 1.5 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…