Ubuntu: (Multiple Advisories) (CVE-2024-41065): Linux kernel vulnerabilities

Ubuntu: (Multiple Advisories) (CVE-2024-41065): Linux kernel vulnerabilities

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

07/29/2024

Created

11/05/2024

Added

11/04/2024

Modified

01/23/2025

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Whitelist dtl slub object for copying to userspace Reading the dispatch trace log from /sys/kernel/debug/powerpc/dtl/cpu-* results in a BUG() when the config CONFIG_HARDENED_USERCOPY is enabled as shown below. kernel BUG at mm/usercopy.c:102! Oops: Exception in kernel mode, sig: 5 [#1] LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA pSeries Modules linked in: xfs libcrc32c dm_service_time sd_mod t10_pi sg ibmvfc scsi_transport_fc ibmveth pseries_wdt dm_multipath dm_mirror dm_region_hash dm_log dm_mod fuse CPU: 27 PID: 1815 Comm: python3 Not tainted 6.10.0-rc3 #85 Hardware name: IBM,9040-MRX POWER10 (raw) 0x800200 0xf000006 of:IBM,FW1060.00 (NM1060_042) hv:phyp pSeries NIP:c0000000005d23d4 LR: c0000000005d23d0 CTR: 00000000006ee6f8 REGS: c000000120c078c0 TRAP: 0700 Not tainted(6.10.0-rc3) MSR:8000000000029033 <SF,EE,ME,IR,DR,RI,LE>CR: 2828220fXER: 0000000e CFAR: c0000000001fdc80 IRQMASK: 0 [ ... GPRs omitted ... ] NIP [c0000000005d23d4] usercopy_abort+0x78/0xb0 LR [c0000000005d23d0] usercopy_abort+0x74/0xb0 Call Trace: usercopy_abort+0x74/0xb0 (unreliable) __check_heap_object+0xf8/0x120 check_heap_object+0x218/0x240 __check_object_size+0x84/0x1a4 dtl_file_read+0x17c/0x2c4 full_proxy_read+0x8c/0x110 vfs_read+0xdc/0x3a0 ksys_read+0x84/0x144 system_call_exception+0x124/0x330 system_call_vectored_common+0x15c/0x2ec --- interrupt: 3000 at 0x7fff81f3ab34 Commit 6d07d1cd300f ("usercopy: Restrict non-usercopy caches to size 0") requires that only whitelisted areas in slab/slub objects can be copied to userspace when usercopy hardening is enabled using CONFIG_HARDENED_USERCOPY. Dtl contains hypervisor dispatch events which are expected to be read by privileged users. Hence mark this safe for user access. Specify useroffset=0 and usersize=DISPATCH_LOG_BYTES to whitelist the entire object.

Solution(s)

• ubuntu-upgrade-linux-image-5-15-0-1038-xilinx-zynqmp
• ubuntu-upgrade-linux-image-5-15-0-1055-gkeop
• ubuntu-upgrade-linux-image-5-15-0-1065-ibm
• ubuntu-upgrade-linux-image-5-15-0-1065-raspi
• ubuntu-upgrade-linux-image-5-15-0-1067-intel-iotg
• ubuntu-upgrade-linux-image-5-15-0-1067-nvidia
• ubuntu-upgrade-linux-image-5-15-0-1067-nvidia-lowlatency
• ubuntu-upgrade-linux-image-5-15-0-1069-gke
• ubuntu-upgrade-linux-image-5-15-0-1069-kvm
• ubuntu-upgrade-linux-image-5-15-0-1070-oracle
• ubuntu-upgrade-linux-image-5-15-0-1071-gcp
• ubuntu-upgrade-linux-image-5-15-0-1072-aws
• ubuntu-upgrade-linux-image-5-15-0-1075-azure
• ubuntu-upgrade-linux-image-5-15-0-1078-azure
• ubuntu-upgrade-linux-image-5-15-0-125-generic
• ubuntu-upgrade-linux-image-5-15-0-125-generic-64k
• ubuntu-upgrade-linux-image-5-15-0-125-generic-lpae
• ubuntu-upgrade-linux-image-5-15-0-125-lowlatency
• ubuntu-upgrade-linux-image-5-15-0-125-lowlatency-64k
• ubuntu-upgrade-linux-image-5-4-0-1044-iot
• ubuntu-upgrade-linux-image-5-4-0-1054-xilinx-zynqmp
• ubuntu-upgrade-linux-image-5-4-0-1082-ibm
• ubuntu-upgrade-linux-image-5-4-0-1094-bluefield
• ubuntu-upgrade-linux-image-5-4-0-1102-gkeop
• ubuntu-upgrade-linux-image-5-4-0-1119-raspi
• ubuntu-upgrade-linux-image-5-4-0-1123-kvm
• ubuntu-upgrade-linux-image-5-4-0-1134-oracle
• ubuntu-upgrade-linux-image-5-4-0-1135-aws
• ubuntu-upgrade-linux-image-5-4-0-1139-azure
• ubuntu-upgrade-linux-image-5-4-0-1139-gcp
• ubuntu-upgrade-linux-image-5-4-0-1140-azure
• ubuntu-upgrade-linux-image-5-4-0-200-generic
• ubuntu-upgrade-linux-image-5-4-0-200-generic-lpae
• ubuntu-upgrade-linux-image-5-4-0-200-lowlatency
• ubuntu-upgrade-linux-image-6-8-0-1002-gkeop
• ubuntu-upgrade-linux-image-6-8-0-1013-gke
• ubuntu-upgrade-linux-image-6-8-0-1014-ibm
• ubuntu-upgrade-linux-image-6-8-0-1014-raspi
• ubuntu-upgrade-linux-image-6-8-0-1015-oracle
• ubuntu-upgrade-linux-image-6-8-0-1015-oracle-64k
• ubuntu-upgrade-linux-image-6-8-0-1016-azure
• ubuntu-upgrade-linux-image-6-8-0-1016-azure-fde
• ubuntu-upgrade-linux-image-6-8-0-1016-gcp
• ubuntu-upgrade-linux-image-6-8-0-1016-oem
• ubuntu-upgrade-linux-image-6-8-0-1017-azure
• ubuntu-upgrade-linux-image-6-8-0-1017-azure-fde
• ubuntu-upgrade-linux-image-6-8-0-1017-gcp
• ubuntu-upgrade-linux-image-6-8-0-1017-nvidia
• ubuntu-upgrade-linux-image-6-8-0-1017-nvidia-64k
• ubuntu-upgrade-linux-image-6-8-0-1017-nvidia-lowlatency
• ubuntu-upgrade-linux-image-6-8-0-1017-nvidia-lowlatency-64k
• ubuntu-upgrade-linux-image-6-8-0-1018-aws
• ubuntu-upgrade-linux-image-6-8-0-48-generic
• ubuntu-upgrade-linux-image-6-8-0-48-generic-64k
• ubuntu-upgrade-linux-image-6-8-0-48-lowlatency
• ubuntu-upgrade-linux-image-6-8-0-48-lowlatency-64k
• ubuntu-upgrade-linux-image-aws
• ubuntu-upgrade-linux-image-aws-lts-20-04
• ubuntu-upgrade-linux-image-aws-lts-22-04
• ubuntu-upgrade-linux-image-azure
• ubuntu-upgrade-linux-image-azure-cvm
• ubuntu-upgrade-linux-image-azure-fde
• ubuntu-upgrade-linux-image-azure-lts-20-04
• ubuntu-upgrade-linux-image-azure-lts-22-04
• ubuntu-upgrade-linux-image-bluefield
• ubuntu-upgrade-linux-image-gcp
• ubuntu-upgrade-linux-image-gcp-lts-20-04
• ubuntu-upgrade-linux-image-gcp-lts-22-04
• ubuntu-upgrade-linux-image-generic
• ubuntu-upgrade-linux-image-generic-64k
• ubuntu-upgrade-linux-image-generic-64k-hwe-20-04
• ubuntu-upgrade-linux-image-generic-64k-hwe-22-04
• ubuntu-upgrade-linux-image-generic-64k-hwe-24-04
• ubuntu-upgrade-linux-image-generic-hwe-18-04
• ubuntu-upgrade-linux-image-generic-hwe-20-04
• ubuntu-upgrade-linux-image-generic-hwe-22-04
• ubuntu-upgrade-linux-image-generic-hwe-24-04
• ubuntu-upgrade-linux-image-generic-lpae
• ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04
• ubuntu-upgrade-linux-image-gke
• ubuntu-upgrade-linux-image-gke-5-15
• ubuntu-upgrade-linux-image-gkeop
• ubuntu-upgrade-linux-image-gkeop-5-15
• ubuntu-upgrade-linux-image-gkeop-5-4
• ubuntu-upgrade-linux-image-gkeop-6-8
• ubuntu-upgrade-linux-image-ibm
• ubuntu-upgrade-linux-image-ibm-classic
• ubuntu-upgrade-linux-image-ibm-lts-20-04
• ubuntu-upgrade-linux-image-ibm-lts-24-04
• ubuntu-upgrade-linux-image-intel
• ubuntu-upgrade-linux-image-intel-iotg
• ubuntu-upgrade-linux-image-kvm
• ubuntu-upgrade-linux-image-lowlatency
• ubuntu-upgrade-linux-image-lowlatency-64k
• ubuntu-upgrade-linux-image-lowlatency-64k-hwe-20-04
• ubuntu-upgrade-linux-image-lowlatency-64k-hwe-22-04
• ubuntu-upgrade-linux-image-lowlatency-64k-hwe-24-04
• ubuntu-upgrade-linux-image-lowlatency-hwe-18-04
• ubuntu-upgrade-linux-image-lowlatency-hwe-20-04
• ubuntu-upgrade-linux-image-lowlatency-hwe-22-04
• ubuntu-upgrade-linux-image-lowlatency-hwe-24-04
• ubuntu-upgrade-linux-image-nvidia
• ubuntu-upgrade-linux-image-nvidia-6-8
• ubuntu-upgrade-linux-image-nvidia-64k
• ubuntu-upgrade-linux-image-nvidia-64k-6-8
• ubuntu-upgrade-linux-image-nvidia-64k-hwe-22-04
• ubuntu-upgrade-linux-image-nvidia-hwe-22-04
• ubuntu-upgrade-linux-image-nvidia-lowlatency
• ubuntu-upgrade-linux-image-nvidia-lowlatency-64k
• ubuntu-upgrade-linux-image-oem
• ubuntu-upgrade-linux-image-oem-20-04
• ubuntu-upgrade-linux-image-oem-20-04b
• ubuntu-upgrade-linux-image-oem-20-04c
• ubuntu-upgrade-linux-image-oem-20-04d
• ubuntu-upgrade-linux-image-oem-22-04
• ubuntu-upgrade-linux-image-oem-22-04a
• ubuntu-upgrade-linux-image-oem-22-04b
• ubuntu-upgrade-linux-image-oem-22-04c
• ubuntu-upgrade-linux-image-oem-22-04d
• ubuntu-upgrade-linux-image-oem-24-04
• ubuntu-upgrade-linux-image-oem-24-04a
• ubuntu-upgrade-linux-image-oem-osp1
• ubuntu-upgrade-linux-image-oracle
• ubuntu-upgrade-linux-image-oracle-64k
• ubuntu-upgrade-linux-image-oracle-lts-20-04
• ubuntu-upgrade-linux-image-oracle-lts-22-04
• ubuntu-upgrade-linux-image-raspi
• ubuntu-upgrade-linux-image-raspi-hwe-18-04
• ubuntu-upgrade-linux-image-raspi-nolpae
• ubuntu-upgrade-linux-image-raspi2
• ubuntu-upgrade-linux-image-snapdragon-hwe-18-04
• ubuntu-upgrade-linux-image-virtual
• ubuntu-upgrade-linux-image-virtual-hwe-18-04
• ubuntu-upgrade-linux-image-virtual-hwe-20-04
• ubuntu-upgrade-linux-image-virtual-hwe-22-04
• ubuntu-upgrade-linux-image-virtual-hwe-24-04
• ubuntu-upgrade-linux-image-xilinx-zynqmp

References

• https://attackerkb.com/topics/cve-2024-41065
• CVE - 2024-41065
• USN-7088-1
• USN-7088-2
• USN-7088-3
• USN-7088-4
• USN-7088-5
• USN-7089-1
• USN-7089-2
• USN-7089-3
• USN-7089-4
• USN-7089-5
• USN-7089-6
• USN-7089-7
• USN-7090-1
• USN-7095-1
• USN-7100-1
• USN-7100-2
• USN-7119-1
• USN-7123-1
• USN-7144-1
• USN-7156-1
• USN-7194-1

View more