USN-6777-2: Linux kernel (Azure) vulnerabilities

Releases

• Ubuntu 16.04 ESM
• Ubuntu 14.04 ESM

Packages

• linux-azure - Linux kernel for Microsoft Azure Cloud systems

Details

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

• Block layer subsystem;
• Userspace I/O drivers;
• Ceph distributed file system;
• Ext4 file system;
• JFS file system;
• NILFS2 file system;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• MAC80211 subsystem;
• Netlink;
• NFC subsystem;
• Tomoyo security module;
  (CVE-2023-52524, CVE-2023-52530, CVE-2023-52601, CVE-2023-52439,
  CVE-2024-26635, CVE-2023-52602, CVE-2024-26614, CVE-2024-26704,
  CVE-2023-52604, CVE-2023-52566, CVE-2021-46981, CVE-2024-26622,
  CVE-2024-26735, CVE-2024-26805, CVE-2024-26801, CVE-2023-52583)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 16.04

• linux-image-4.15.0-1177-azure - 4.15.0-1177.192~16.04.1
  Available with Ubuntu Pro
• linux-image-azure - 4.15.0.1177.192~16.04.1
  Available with Ubuntu Pro

Ubuntu 14.04

• linux-image-4.15.0-1177-azure - 4.15.0-1177.192~14.04.1
  Available with Ubuntu Pro
• linux-image-azure - 4.15.0.1177.192~14.04.1
  Available with Ubuntu Pro

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

• CVE-2023-47233
• CVE-2024-26622
• CVE-2023-52530
• CVE-2023-52602
• CVE-2021-46981
• CVE-2024-26704
• CVE-2023-52583
• CVE-2024-26805
• CVE-2024-26635
• CVE-2023-52524
• CVE-2023-52601
• CVE-2023-52566
• CVE-2024-26735
• CVE-2024-26801
• CVE-2024-26614
• CVE-2023-52604
• CVE-2023-52439

Related notices

• USN-6774-1
• USN-6775-1
• USN-6776-1
• USN-6777-1
• USN-6778-1
• USN-6775-2
• USN-6777-3
• USN-6777-4
• USN-6795-1
• USN-6816-1
• USN-6817-1
• USN-6817-2
• USN-6828-1
• USN-6817-3
• USN-6878-1
• USN-6688-1
• USN-6766-1
• USN-6767-1
• USN-6767-2
• USN-6766-2
• USN-6766-3
• USN-6818-1
• USN-6819-1
• USN-6818-2
• USN-6819-2
• USN-6819-3
• USN-6818-3
• USN-6818-4
• USN-6819-4
• USN-6820-1
• USN-6821-1
• USN-6821-2
• USN-6820-2
• USN-6821-3
• USN-6831-1
• USN-6821-4
• USN-6871-1
• USN-6892-1
• USN-6919-1
• USN-6895-1
• USN-6895-2
• USN-6900-1
• USN-6895-3
• USN-6895-4
• USN-6724-1
• USN-6725-1
• USN-6726-1
• USN-6724-2
• USN-6725-2
• USN-6726-2
• USN-6726-3