{"id":59089,"date":"2024-08-22T18:50:14","date_gmt":"2024-08-22T15:50:14","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/180331\/USN-6979-1.txt"},"modified":"2024-08-22T18:50:14","modified_gmt":"2024-08-22T15:50:14","slug":"ubuntu-security-notice-usn-6979-1","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/ubuntu-security-notice-usn-6979-1\/","title":{"rendered":"Ubuntu Security Notice USN-6979-1"},"content":{"rendered":"<p>==========================================================================<br \/>Ubuntu Security Notice USN-6979-1<br \/>August 22, 2024<\/p>\n<p>linux-raspi-5.4 vulnerabilities<br \/>==========================================================================<\/p>\n<p>A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n<p>&#8211; Ubuntu 18.04 LTS<\/p>\n<p>Summary:<\/p>\n<p>Several security issues were fixed in the Linux kernel.<\/p>\n<p>Software Description:<br \/>&#8211; linux-raspi-5.4: Linux kernel for Raspberry Pi systems<\/p>\n<p>Details:<\/p>\n<p>Several security issues were discovered in the Linux kernel.<br \/>An attacker could possibly use these to compromise the system.<br \/>This update corrects flaws in the following subsystems:<br \/>&#8211; ARM64 architecture;<br \/>&#8211; M68K architecture;<br \/>&#8211; User-Mode Linux (UML);<br \/>&#8211; x86 architecture;<br \/>&#8211; Accessibility subsystem;<br \/>&#8211; Character device driver;<br \/>&#8211; Clock framework and drivers;<br \/>&#8211; CPU frequency scaling framework;<br \/>&#8211; Hardware crypto device drivers;<br \/>&#8211; Buffer Sharing and Synchronization framework;<br \/>&#8211; FireWire subsystem;<br \/>&#8211; ARM SCMI message protocol;<br \/>&#8211; GPU drivers;<br \/>&#8211; HW tracing;<br \/>&#8211; InfiniBand drivers;<br \/>&#8211; Macintosh device drivers;<br \/>&#8211; Multiple devices driver;<br \/>&#8211; Media drivers;<br \/>&#8211; Network drivers;<br \/>&#8211; Pin controllers subsystem;<br \/>&#8211; S\/390 drivers;<br \/>&#8211; SCSI drivers;<br \/>&#8211; SoundWire subsystem;<br \/>&#8211; Greybus lights staging drivers;<br \/>&#8211; TTY drivers;<br \/>&#8211; Framebuffer layer;<br \/>&#8211; Virtio drivers;<br \/>&#8211; 9P distributed file system;<br \/>&#8211; eCrypt file system;<br \/>&#8211; EROFS file system;<br \/>&#8211; Ext4 file system;<br \/>&#8211; F2FS file system;<br \/>&#8211; JFFS2 file system;<br \/>&#8211; Network file system client;<br \/>&#8211; NILFS2 file system;<br \/>&#8211; SMB network file system;<br \/>&#8211; Mellanox drivers;<br \/>&#8211; Kernel debugger infrastructure;<br \/>&#8211; IRQ subsystem;<br \/>&#8211; Tracing infrastructure;<br \/>&#8211; Dynamic debug library;<br \/>&#8211; 9P file system network protocol;<br \/>&#8211; Bluetooth subsystem;<br \/>&#8211; Networking core;<br \/>&#8211; IPv4 networking;<br \/>&#8211; IPv6 networking;<br \/>&#8211; Netfilter;<br \/>&#8211; NET\/ROM layer;<br \/>&#8211; NFC subsystem;<br \/>&#8211; NSH protocol;<br \/>&#8211; Open vSwitch;<br \/>&#8211; Phonet protocol;<br \/>&#8211; TIPC protocol;<br \/>&#8211; TLS protocol;<br \/>&#8211; Unix domain sockets;<br \/>&#8211; Wireless networking;<br \/>&#8211; eXpress Data Path;<br \/>&#8211; XFRM subsystem;<br \/>&#8211; ALSA framework;<br \/>(CVE-2022-48674, CVE-2024-36016, CVE-2024-36934, CVE-2024-39471,<br \/>CVE-2024-38381, CVE-2024-26584, CVE-2024-38635, CVE-2024-36902,<br \/>CVE-2022-48772, CVE-2024-38600, CVE-2024-39475, CVE-2024-26886,<br \/>CVE-2024-39301, CVE-2024-36919, CVE-2024-35947, CVE-2024-38559,<br \/>CVE-2024-38637, CVE-2024-36014, CVE-2024-36960, CVE-2024-35976,<br \/>CVE-2024-27399, CVE-2024-38607, CVE-2024-38558, CVE-2024-38578,<br \/>CVE-2024-36015, CVE-2024-39488, CVE-2024-38780, CVE-2024-36940,<br \/>CVE-2024-38621, CVE-2024-38659, CVE-2024-26585, CVE-2024-27019,<br \/>CVE-2024-38615, CVE-2024-38661, CVE-2024-37353, CVE-2024-38549,<br \/>CVE-2024-38579, CVE-2024-27401, CVE-2024-38589, CVE-2024-38565,<br \/>CVE-2022-48655, CVE-2024-38567, CVE-2024-38587, CVE-2024-37356,<br \/>CVE-2024-36959, CVE-2024-39493, CVE-2024-38627, CVE-2024-36939,<br \/>CVE-2024-31076, CVE-2024-36971, CVE-2024-38560, CVE-2024-39467,<br \/>CVE-2024-36286, CVE-2024-39480, CVE-2024-26907, CVE-2024-36017,<br \/>CVE-2024-38634, CVE-2023-52585, CVE-2024-38582, CVE-2023-52752,<br \/>CVE-2024-38583, CVE-2024-38618, CVE-2024-36946, CVE-2024-39292,<br \/>CVE-2024-36950, CVE-2024-36886, CVE-2024-39489, CVE-2024-36933,<br \/>CVE-2024-27398, CVE-2023-52434, CVE-2024-36905, CVE-2024-38596,<br \/>CVE-2021-47131, CVE-2024-38601, CVE-2024-38552, CVE-2024-26583,<br \/>CVE-2024-38633, CVE-2024-36964, CVE-2024-39276, CVE-2024-36270,<br \/>CVE-2024-38613, CVE-2024-36904, CVE-2024-38598, CVE-2024-38612,<br \/>CVE-2024-36941, CVE-2024-36954, CVE-2024-38599, CVE-2024-36883,<br \/>CVE-2023-52882, CVE-2024-33621)<\/p>\n<p>Update instructions:<\/p>\n<p>The problem can be corrected by updating your system to the following<br \/>package versions:<\/p>\n<p>Ubuntu 18.04 LTS<br \/>linux-image-5.4.0-1114-raspi 5.4.0-1114.126~18.04.1<br \/>Available with Ubuntu Pro<br \/>linux-image-raspi-hwe-18.04 5.4.0.1114.126~18.04.1<br \/>Available with Ubuntu Pro<\/p>\n<p>After a standard system update you need to reboot your computer to make<br \/>all the necessary changes.<\/p>\n<p>ATTENTION: Due to an unavoidable ABI change the kernel updates have<br \/>been given a new version number, which requires you to recompile and<br \/>reinstall all third party kernel modules you might have installed.<br \/>Unless you manually uninstalled the standard kernel metapackages<br \/>(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,<br \/>linux-powerpc), a standard system upgrade will automatically perform<br \/>this as well.<\/p>\n<p>References:<br \/>https:\/\/ubuntu.com\/security\/notices\/USN-6979-1<br \/>CVE-2021-47131, CVE-2022-48655, CVE-2022-48674, CVE-2022-48772,<br \/>CVE-2023-52434, CVE-2023-52585, CVE-2023-52752, CVE-2023-52882,<br \/>CVE-2024-26583, CVE-2024-26584, CVE-2024-26585, CVE-2024-26886,<br \/>CVE-2024-26907, CVE-2024-27019, CVE-2024-27398, CVE-2024-27399,<br \/>CVE-2024-27401, CVE-2024-31076, CVE-2024-33621, CVE-2024-35947,<br \/>CVE-2024-35976, CVE-2024-36014, CVE-2024-36015, CVE-2024-36016,<br \/>CVE-2024-36017, CVE-2024-36270, CVE-2024-36286, CVE-2024-36883,<br \/>CVE-2024-36886, CVE-2024-36902, CVE-2024-36904, CVE-2024-36905,<br \/>CVE-2024-36919, CVE-2024-36933, CVE-2024-36934, CVE-2024-36939,<br \/>CVE-2024-36940, CVE-2024-36941, CVE-2024-36946, CVE-2024-36950,<br \/>CVE-2024-36954, CVE-2024-36959, CVE-2024-36960, CVE-2024-36964,<br \/>CVE-2024-36971, CVE-2024-37353, CVE-2024-37356, CVE-2024-38381,<br \/>CVE-2024-38549, CVE-2024-38552, CVE-2024-38558, CVE-2024-38559,<br \/>CVE-2024-38560, CVE-2024-38565, CVE-2024-38567, CVE-2024-38578,<br \/>CVE-2024-38579, CVE-2024-38582, CVE-2024-38583, CVE-2024-38587,<br \/>CVE-2024-38589, CVE-2024-38596, CVE-2024-38598, CVE-2024-38599,<br \/>CVE-2024-38600, CVE-2024-38601, CVE-2024-38607, CVE-2024-38612,<br \/>CVE-2024-38613, CVE-2024-38615, CVE-2024-38618, CVE-2024-38621,<br \/>CVE-2024-38627, CVE-2024-38633, CVE-2024-38634, CVE-2024-38635,<br \/>CVE-2024-38637, CVE-2024-38659, CVE-2024-38661, CVE-2024-38780,<br \/>CVE-2024-39276, CVE-2024-39292, CVE-2024-39301, CVE-2024-39467,<br \/>CVE-2024-39471, CVE-2024-39475, CVE-2024-39480, CVE-2024-39488,<br \/>CVE-2024-39489, CVE-2024-39493<\/p>\n","protected":false},"excerpt":{"rendered":"<p>==========================================================================Ubuntu Security Notice USN-6979-1August 22, 2024 linux-raspi-5.4 vulnerabilities========================================================================== A security issue affects these releases of Ubuntu and its derivatives: &#8211; Ubuntu 18.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description:&#8211; linux-raspi-5.4: Linux kernel for Raspberry Pi systems Details: Several security issues were discovered in the Linux kernel.An attacker could possibly &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-59089","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/59089","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=59089"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/59089\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=59089"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=59089"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=59089"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}