Ubuntu: (Multiple Advisories) (CVE-2024-36025): Linux kernel vulnerabilities

Ubuntu: (Multiple Advisories) (CVE-2024-36025): Linux kernel vulnerabilities

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

05/30/2024

Created

07/12/2024

Added

07/12/2024

Modified

09/20/2024

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() The app_reply->elem[] array is allocated earlier in this function and it has app_req.num_ports elements.Thus this > comparison needs to be >= to prevent memory corruption.

Solution(s)

• ubuntu-upgrade-linux-image-5-15-0-1035-xilinx-zynqmp
• ubuntu-upgrade-linux-image-5-15-0-1048-gkeop
• ubuntu-upgrade-linux-image-5-15-0-1058-ibm
• ubuntu-upgrade-linux-image-5-15-0-1058-raspi
• ubuntu-upgrade-linux-image-5-15-0-1060-intel-iotg
• ubuntu-upgrade-linux-image-5-15-0-1060-nvidia
• ubuntu-upgrade-linux-image-5-15-0-1060-nvidia-lowlatency
• ubuntu-upgrade-linux-image-5-15-0-1062-gke
• ubuntu-upgrade-linux-image-5-15-0-1062-kvm
• ubuntu-upgrade-linux-image-5-15-0-1063-oracle
• ubuntu-upgrade-linux-image-5-15-0-1064-gcp
• ubuntu-upgrade-linux-image-5-15-0-1065-aws
• ubuntu-upgrade-linux-image-5-15-0-1065-gcp
• ubuntu-upgrade-linux-image-5-15-0-1068-azure
• ubuntu-upgrade-linux-image-5-15-0-1068-azure-fde
• ubuntu-upgrade-linux-image-5-15-0-116-generic
• ubuntu-upgrade-linux-image-5-15-0-116-generic-64k
• ubuntu-upgrade-linux-image-5-15-0-116-generic-lpae
• ubuntu-upgrade-linux-image-5-15-0-116-lowlatency
• ubuntu-upgrade-linux-image-5-15-0-116-lowlatency-64k
• ubuntu-upgrade-linux-image-6-8-0-1006-gke
• ubuntu-upgrade-linux-image-6-8-0-1007-intel
• ubuntu-upgrade-linux-image-6-8-0-1007-raspi
• ubuntu-upgrade-linux-image-6-8-0-1008-ibm
• ubuntu-upgrade-linux-image-6-8-0-1008-oem
• ubuntu-upgrade-linux-image-6-8-0-1008-oracle
• ubuntu-upgrade-linux-image-6-8-0-1008-oracle-64k
• ubuntu-upgrade-linux-image-6-8-0-1009-nvidia
• ubuntu-upgrade-linux-image-6-8-0-1009-nvidia-64k
• ubuntu-upgrade-linux-image-6-8-0-1010-azure
• ubuntu-upgrade-linux-image-6-8-0-1010-azure-fde
• ubuntu-upgrade-linux-image-6-8-0-1010-gcp
• ubuntu-upgrade-linux-image-6-8-0-1011-aws
• ubuntu-upgrade-linux-image-6-8-0-38-generic
• ubuntu-upgrade-linux-image-6-8-0-38-generic-64k
• ubuntu-upgrade-linux-image-6-8-0-38-lowlatency
• ubuntu-upgrade-linux-image-6-8-0-38-lowlatency-64k
• ubuntu-upgrade-linux-image-aws
• ubuntu-upgrade-linux-image-aws-lts-22-04
• ubuntu-upgrade-linux-image-azure
• ubuntu-upgrade-linux-image-azure-cvm
• ubuntu-upgrade-linux-image-azure-fde
• ubuntu-upgrade-linux-image-azure-fde-lts-22-04
• ubuntu-upgrade-linux-image-azure-lts-22-04
• ubuntu-upgrade-linux-image-gcp
• ubuntu-upgrade-linux-image-gcp-lts-22-04
• ubuntu-upgrade-linux-image-generic
• ubuntu-upgrade-linux-image-generic-64k
• ubuntu-upgrade-linux-image-generic-64k-hwe-20-04
• ubuntu-upgrade-linux-image-generic-64k-hwe-24-04
• ubuntu-upgrade-linux-image-generic-hwe-20-04
• ubuntu-upgrade-linux-image-generic-hwe-24-04
• ubuntu-upgrade-linux-image-generic-lpae
• ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04
• ubuntu-upgrade-linux-image-gke
• ubuntu-upgrade-linux-image-gke-5-15
• ubuntu-upgrade-linux-image-gkeop
• ubuntu-upgrade-linux-image-gkeop-5-15
• ubuntu-upgrade-linux-image-ibm
• ubuntu-upgrade-linux-image-ibm-classic
• ubuntu-upgrade-linux-image-ibm-lts-24-04
• ubuntu-upgrade-linux-image-intel
• ubuntu-upgrade-linux-image-intel-iotg
• ubuntu-upgrade-linux-image-kvm
• ubuntu-upgrade-linux-image-lowlatency
• ubuntu-upgrade-linux-image-lowlatency-64k
• ubuntu-upgrade-linux-image-lowlatency-64k-hwe-20-04
• ubuntu-upgrade-linux-image-lowlatency-hwe-20-04
• ubuntu-upgrade-linux-image-nvidia
• ubuntu-upgrade-linux-image-nvidia-64k
• ubuntu-upgrade-linux-image-nvidia-lowlatency
• ubuntu-upgrade-linux-image-oem-20-04
• ubuntu-upgrade-linux-image-oem-20-04b
• ubuntu-upgrade-linux-image-oem-20-04c
• ubuntu-upgrade-linux-image-oem-20-04d
• ubuntu-upgrade-linux-image-oem-24-04
• ubuntu-upgrade-linux-image-oem-24-04a
• ubuntu-upgrade-linux-image-oracle
• ubuntu-upgrade-linux-image-oracle-64k
• ubuntu-upgrade-linux-image-oracle-lts-22-04
• ubuntu-upgrade-linux-image-raspi
• ubuntu-upgrade-linux-image-raspi-nolpae
• ubuntu-upgrade-linux-image-virtual
• ubuntu-upgrade-linux-image-virtual-hwe-20-04
• ubuntu-upgrade-linux-image-virtual-hwe-24-04
• ubuntu-upgrade-linux-image-xilinx-zynqmp

References

• https://attackerkb.com/topics/cve-2024-36025
• CVE - 2024-36025
• USN-6893-1
• USN-6893-2
• USN-6893-3
• USN-6898-1
• USN-6898-2
• USN-6898-3
• USN-6898-4
• USN-6917-1
• USN-6918-1
• USN-6919-1
• USN-6927-1
• USN-7019-1

View more