USN-7173-2
Dashboard / Vulnerabilities / USN-7173-2
USN-7173-2
Summary: linux-aws, linux-aws-5.4, linux-bluefield, linux-ibm, linux-ibm-5.4, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities
Details: Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - SCSI subsystem; - Ext4 file system; - Bluetooth subsystem; - Memory management; - Amateur Radio drivers; - Network traffic control; - Sun RPC protocol; - VMware vSockets driver; (CVE-2023-52821, CVE-2024-40910, CVE-2024-43892, CVE-2024-49967, CVE-2024-50264, CVE-2024-36952, CVE-2024-38553, CVE-2021-47101, CVE-2021-47001, CVE-2024-35965, CVE-2024-35963, CVE-2024-35966, CVE-2024-35967, CVE-2024-53057, CVE-2024-38597)
References: https://ubuntu.com/security/notices/USN-7173-2, https://ubuntu.com/security/CVE-2021-47001, https://ubuntu.com/security/CVE-2021-47101, https://ubuntu.com/security/CVE-2022-38096, https://ubuntu.com/security/CVE-2023-52821, https://ubuntu.com/security/CVE-2024-35963, https://ubuntu.com/security/CVE-2024-35965, https://ubuntu.com/security/CVE-2024-35966, https://ubuntu.com/security/CVE-2024-35967, https://ubuntu.com/security/CVE-2024-36952, https://ubuntu.com/security/CVE-2024-38553, https://ubuntu.com/security/CVE-2024-38597, https://ubuntu.com/security/CVE-2024-40910, https://ubuntu.com/security/CVE-2024-43892, https://ubuntu.com/security/CVE-2024-49967, https://ubuntu.com/security/CVE-2024-50264, https://ubuntu.com/security/CVE-2024-53057
Affected packages
Package
Name: linux-aws-5.4
Purl: pkg:deb/ubuntu/linux-aws-5.4?arch=source&distro=esm-infra%2Fbionic
Affected ranges
Type: ECOSYSTEM
Events:
