Alerts This Week
Warning Icon 1 1,146
Alerts This Week
Warning Icon 1 1,146

Ubuntu 22.04 LTS: USN-7179-3 critical: linux-gke buffer overflow and DoS

ubuntu
Calendar Grey January 7, 2025
Dist Ubuntu Esm H88
Uncover key enhancements in Ubuntu 22.04 LTS regarding linux-gke, tackling various vulnerabilities and their consequences.
Several security issues were fixed in the Linux kernel.

Summary

Several security issues were fixed in the Linux kernel.

Software Description:

- linux-gke: Linux kernel for Google Container Engine (GKE) systems

Details:

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux

kernel contained a type-confusion error. A physically proximate remote

attacker could use this to cause a denial of service (system crash) or

possibly execute arbitrary code. (CVE-2020-12351)

Andy Nguyen discovered that the Bluetooth A2MP implementation in the Linux

kernel did not properly initialize memory in some situations. A physically

proximate remote attacker could use this to expose sensitive information

(kernel memory). (CVE-2020-12352)

Andy Nguyen discovered that the Bluetooth HCI event packet parser in the

Linux kernel did not properly handle event advertisements of certain sizes,

leading to a heap-based buffer overflow. A physically proximate remote

attacker could use this to cause a denial of service (system crash) or

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow ubuntu linux-gke

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
   linux-image-5.15.0-1072-gke     5.15.0-1072.78
   linux-image-gke                 5.15.0.1072.71
   linux-image-gke-5.15            5.15.0.1072.71

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

https://ubuntu.com/security/notices/USN-7179-3

https://ubuntu.com/security/notices/USN-7179-2

https://ubuntu.com/security/notices/USN-7179-1

CVE-2020-12351, CVE-2020-12352, CVE-2020-24490, CVE-2024-26822,

CVE-2024-35963, CVE-2024-35965, CVE-2024-35966, CVE-2024-35967,

CVE-2024-38553, CVE-2024-40910, CVE-2024-40973, CVE-2024-43904,

CVE-2024-50264, CVE-2024-53057

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7179-3

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow ubuntu linux-gke

Package Information

https://launchpad.net/ubuntu/+source/linux-gke/5.15.0-1072.78

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here