Ubuntu: (Multiple Advisories) (CVE-2024-42159): Linux kernel vulnerabilities

Ubuntu: (Multiple Advisories) (CVE-2024-42159): Linux kernel vulnerabilities

Severity

7

CVSS

(AV:L/AC:L/Au:S/C:C/I:C/A:C)

Published

07/30/2024

Created

09/20/2024

Added

09/20/2024

Modified

01/30/2025

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Sanitise num_phys Information is stored in mr_sas_port->phy_mask, values larger then size of this field shouldn't be allowed.

Solution(s)

• ubuntu-upgrade-linux-image-6-8-0-1002-gkeop
• ubuntu-upgrade-linux-image-6-8-0-1011-gke
• ubuntu-upgrade-linux-image-6-8-0-1012-raspi
• ubuntu-upgrade-linux-image-6-8-0-1013-ibm
• ubuntu-upgrade-linux-image-6-8-0-1013-oem
• ubuntu-upgrade-linux-image-6-8-0-1013-oracle
• ubuntu-upgrade-linux-image-6-8-0-1013-oracle-64k
• ubuntu-upgrade-linux-image-6-8-0-1014-nvidia
• ubuntu-upgrade-linux-image-6-8-0-1014-nvidia-64k
• ubuntu-upgrade-linux-image-6-8-0-1014-nvidia-lowlatency
• ubuntu-upgrade-linux-image-6-8-0-1014-nvidia-lowlatency-64k
• ubuntu-upgrade-linux-image-6-8-0-1015-azure
• ubuntu-upgrade-linux-image-6-8-0-1015-azure-fde
• ubuntu-upgrade-linux-image-6-8-0-1015-gcp
• ubuntu-upgrade-linux-image-6-8-0-1016-aws
• ubuntu-upgrade-linux-image-6-8-0-45-generic
• ubuntu-upgrade-linux-image-6-8-0-45-generic-64k
• ubuntu-upgrade-linux-image-6-8-0-45-lowlatency
• ubuntu-upgrade-linux-image-6-8-0-45-lowlatency-64k
• ubuntu-upgrade-linux-image-aws
• ubuntu-upgrade-linux-image-azure
• ubuntu-upgrade-linux-image-azure-fde
• ubuntu-upgrade-linux-image-gcp
• ubuntu-upgrade-linux-image-generic
• ubuntu-upgrade-linux-image-generic-64k
• ubuntu-upgrade-linux-image-generic-64k-hwe-22-04
• ubuntu-upgrade-linux-image-generic-64k-hwe-24-04
• ubuntu-upgrade-linux-image-generic-hwe-22-04
• ubuntu-upgrade-linux-image-generic-hwe-24-04
• ubuntu-upgrade-linux-image-generic-lpae
• ubuntu-upgrade-linux-image-gke
• ubuntu-upgrade-linux-image-gkeop
• ubuntu-upgrade-linux-image-gkeop-6-8
• ubuntu-upgrade-linux-image-ibm
• ubuntu-upgrade-linux-image-ibm-classic
• ubuntu-upgrade-linux-image-ibm-lts-24-04
• ubuntu-upgrade-linux-image-kvm
• ubuntu-upgrade-linux-image-lowlatency
• ubuntu-upgrade-linux-image-lowlatency-64k
• ubuntu-upgrade-linux-image-lowlatency-64k-hwe-22-04
• ubuntu-upgrade-linux-image-lowlatency-hwe-22-04
• ubuntu-upgrade-linux-image-nvidia
• ubuntu-upgrade-linux-image-nvidia-6-8
• ubuntu-upgrade-linux-image-nvidia-64k
• ubuntu-upgrade-linux-image-nvidia-64k-6-8
• ubuntu-upgrade-linux-image-nvidia-lowlatency
• ubuntu-upgrade-linux-image-nvidia-lowlatency-64k
• ubuntu-upgrade-linux-image-oem-22-04
• ubuntu-upgrade-linux-image-oem-22-04a
• ubuntu-upgrade-linux-image-oem-22-04b
• ubuntu-upgrade-linux-image-oem-22-04c
• ubuntu-upgrade-linux-image-oem-22-04d
• ubuntu-upgrade-linux-image-oem-24-04
• ubuntu-upgrade-linux-image-oem-24-04a
• ubuntu-upgrade-linux-image-oracle
• ubuntu-upgrade-linux-image-oracle-64k
• ubuntu-upgrade-linux-image-raspi
• ubuntu-upgrade-linux-image-virtual
• ubuntu-upgrade-linux-image-virtual-hwe-22-04
• ubuntu-upgrade-linux-image-virtual-hwe-24-04

References

• https://attackerkb.com/topics/cve-2024-42159
• CVE - 2024-42159
• USN-7020-1
• USN-7020-2
• USN-7020-3
• USN-7020-4
• USN-7029-1
• USN-7156-1

View more