Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-7159-4 December 20, 2024 linux-iot vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-iot: Linux kernel for IoT platforms Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - S390 architecture; - x86 architecture; - Power management core; - GPU drivers; - InfiniBand drivers; - Network drivers; - S/390 drivers; - TTY drivers; - BTRFS file system; - EROFS file system; - F2FS file system; - File systems infrastructure; - BPF subsystem; - Socket messages infrastructure; - Bluetooth subsystem; - Ethernet bridge; - Networking core; - IPv4 networking; - SELinux security module; (CVE-2022-48938, CVE-2024-42156, CVE-2024-36953, CVE-2024-38538, CVE-2021-47501, CVE-2024-42068, CVE-2024-26947, CVE-2024-46724, CVE-2024-36968, CVE-2023-52497, CVE-2024-35951, CVE-2023-52488, CVE-2024-44940, CVE-2022-48733, CVE-2023-52498, CVE-2022-48943, CVE-2024-35904, CVE-2024-42077, CVE-2024-36938, CVE-2023-52639, CVE-2024-42240, CVE-2024-44942, CVE-2021-47076) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS linux-image-5.4.0-1045-iot 5.4.0-1045.46 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires youto recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-7159-4 https://ubuntu.com/security/notices/USN-7159-3 https://ubuntu.com/security/notices/USN-7159-2 https://ubuntu.com/security/notices/USN-7159-1 CVE-2021-47076, CVE-2021-47501, CVE-2022-48733, CVE-2022-48938, CVE-2022-48943, CVE-2023-52488, CVE-2023-52497, CVE-2023-52498, CVE-2023-52639, CVE-2024-26947, CVE-2024-35904, CVE-2024-35951, CVE-2024-36938, CVE-2024-36953, CVE-2024-36968, CVE-2024-38538, CVE-2024-42068, CVE-2024-42077, CVE-2024-42156, CVE-2024-42240, CVE-2024-44940, CVE-2024-44942, CVE-2024-46724 Package Information: . Ubuntu Security Notice USN-7159-5 unveils a series of new updates for the Linux kernel tailored for IoT gadgets, enhancing protection protocols.. linux kernel updates, ubuntu 20.04 LTS, security issues, iot security, kernel vulnerabilities. . Severity: Critical. LinuxSecurity.com Team
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-9978 https://linux.oracle.com/errata/ELSA-2022-9978.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: aarch64: ivshmem-tools-4.2.1-21.el7.aarch64.rpm qemu-4.2.1-21.el7.aarch64.rpm qemu-block-gluster-4.2.1-21.el7.aarch64.rpm qemu-block-iscsi-4.2.1-21.el7.aarch64.rpm qemu-block-rbd-4.2.1-21.el7.aarch64.rpm qemu-common-4.2.1-21.el7.aarch64.rpm qemu-img-4.2.1-21.el7.aarch64.rpm qemu-kvm-4.2.1-21.el7.aarch64.rpm qemu-kvm-core-4.2.1-21.el7.aarch64.rpm qemu-system-aarch64-4.2.1-21.el7.aarch64.rpm qemu-system-aarch64-core-4.2.1-21.el7.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol7/SRPMS-updates/qemu-4.2.1-21.el7.src.rpm Related CVEs: CVE-2022-0216 Description of changes: [15:4.2.1-21.el7] - qemu-kvm.spec: Fix the qemu-regdump sos report plugin path (Mark Kanda) [Orabug: 34680062] - qmp-regdump: Require python3 on OL8 (Mark Kanda) [Orabug: 34672256] - iotests: Adjust 186.out to account for 'null' node-name (Mark Kanda) [Orabug: 34447388] - block: Set the name of BlockBackend if possible (Annie Li) [Orabug: 34447388] - acpi: Update _DSM method in expected files (Mark Kanda) [Orabug: 34616322] - acpi/gpex: Fix cca attribute check for pxb device (Xingang Wang) [Orabug: 34616322] - acpi: Enable pxb unit-test for ARM virt machine (Jiahui Cen) [Orabug: 34616322] - Kconfig: Compile PXB for ARM_VIRT (Jiahui Cen) [Orabug: 34616322] - acpi/gpex: Exclude pxb's resources from PCI0 (Jiahui Cen) [Orabug: 34616322] - acpi/gpex: Inform os to keep firmware resource map (Jiahui Cen) [Orabug: 34616322] - acpi: Add addr offset in build_crs (Jiahui Cen) [Orabug: 34616322] - unit-test: Add testcase for pxb (Yubo Miao) [Orabug: 34616322] - acpi: Align the size to 128k (Yubo Miao) [Orabug: 34616322] - acpi/gpex: Build tables for pxb (Yubo Miao) [Orabug: 34616322] - acpi: Extract crs build form acpi_build.c (Yubo Miao) [Orabug: 34616322] - hw/arm/virt: Write extra pci roots into fw_cfg (Jiahui Cen) [Orabug: 34616322] - fw_cfg: Refactor extra pci roots addition (Jiahui Cen) [Orabug: 34616322] - acpi/gpex: Extract two APIs from acpi_dsdt_add_pci (Yubo Miao) [Orabug: 34616322] - arm: use acpi_dsdt_add_gpex (Gerd Hoffmann) [Orabug: 34616322] - acpi: add acpi_dsdt_add_gpex (Gerd Hoffmann) [Orabug: 34616322] - acpi: Allow DSDT acpi table changes (Jiahui Cen) [Orabug: 34616322] - move MemMapEntry (Gerd Hoffmann) [Orabug: 34616322] - scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34353672] {CVE-2022-0216} - scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34353672] {CVE-2022-0216} - tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daudé) [Orabug: 34353672] {CVE-2022-0216} - hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daudé) [Orabug: 34353672] {CVE-2022-0216} - vfio: defer to commit kvm irq routing when enable msi/msix (Longpeng (Mike)) [Orabug: 34419422] - vfio: simplify the failure path in vfio_msi_enable (Longpeng (Mike)) [Orabug: 34419422] - vfio: move re-enabling INTX out of the common helper (Longpeng (Mike)) [Orabug: 34419422] - vfio: simplify the conditional statements in vfio_msi_enable (Longpeng (Mike)) [Orabug: 34419422] - kvm/msi: do explicit commit when adding msi routes (Longpeng (Mike)) [Orabug: 34419422] - kvm-irqchip: introduce new API to support route change (Longpeng (Mike)) [Orabug: 34419422] - event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34419422] - qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda) [Orabug: 34510460] _______________________________________________ El-errata mailing list
The security update announced as DSA 4279-1 caused regressions on the ARM architectures (boot failures on some systems). Updated packages are now available to correct this issue. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4279-2
Get the latest Linux and open source security news straight to your inbox.