Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
172
security advisorysecurity issuesystem updateUbuntu 22.04 LTS USN-7289-4 moderate: multiple kernel issues
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-7289-4 February 27, 2025 linux-intel-iotg, linux-intel-iotg-5.15 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-intel-iotg: Linux kernel for Intel IoT platforms - linux-intel-iotg-5.15: Linux kernel for Intel IoT platforms Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - ACPI drivers; - GPU drivers; - HID subsystem; - I2C subsystem; - IIO ADC drivers; - IIO subsystem; - InfiniBand drivers; - IOMMU subsystem; - IRQ chip drivers; - Multiple devices driver; - Media drivers; - Network drivers; - STMicroelectronics network drivers; - Parport drivers; - Pin controllers subsystem; - Direct Digital Synthesis drivers; - TCM subsystem; - TTY drivers; - USB Dual Role (OTG-ready) Controller drivers; - USB Serial drivers; - USB Type-C support driver; - USB Type-C Connector System Software Interface driver; - BTRFS file system; - File systems infrastructure; - Network file system (NFS) client; - NILFS2 file system; - NTFS3 file system; - SMB network file system; - User-space API (UAPI); - io_uring subsystem; - BPF subsystem; - Timer substystem drivers; - Tracing infrastructure; - Closures library; - Memory management; - Amateur Radio drivers; - Bluetooth subsystem; - Networking core; - IPv4 networking; - MAC80211 subsystem; - Multipath TCP; - Netfilter; - Network traffic control; - SCTP protocol; - XFRM subsystem; - Key management; - FireWire sound drivers; - HD-audio driver; - QCOM ASoC drivers; - STMicroelectronics SoC drivers; - KVM core; (CVE-2024-50082, CVE-2024-50134, CVE-2024-50142, CVE-2023-52913, CVE-2024-50205, CVE-2024-50127, CVE-2024-50208, CVE-2024-50143, CVE-2024-50163, CVE-2024-53059, CVE-2024-50282, CVE-2024-50279, CVE-2024-50296, CVE-2024-50295, CVE-2024-50010, CVE-2024-53088, CVE-2024-50128, CVE-2024-50290, CVE-2024-50099, CVE-2024-50234, CVE-2024-50154, CVE-2024-53052, CVE-2024-50116, CVE-2024-50168, CVE-2024-50086, CVE-2024-50267, CVE-2024-50156, CVE-2024-50110, CVE-2024-50103, CVE-2024-50192, CVE-2024-40953, CVE-2024-50085, CVE-2024-50247, CVE-2024-50257, CVE-2024-50237, CVE-2024-50185, CVE-2024-50198, CVE-2024-50229, CVE-2024-50171, CVE-2024-50259, CVE-2024-50209, CVE-2024-50233, CVE-2024-35887, CVE-2024-50251, CVE-2024-50141, CVE-2024-53061, CVE-2024-50232, CVE-2024-50167, CVE-2024-50201, CVE-2024-50193, CVE-2024-50269, CVE-2024-39497, CVE-2024-50036, CVE-2024-50299, CVE-2024-50072, CVE-2024-53101, CVE-2024-50262, CVE-2024-50194, CVE-2024-50202, CVE-2024-50101, CVE-2024-50151, CVE-2024-41080, CVE-2024-42291, CVE-2024-50245, CVE-2024-50278, CVE-2024-50195, CVE-2024-50265, CVE-2024-50074, CVE-2024-53063, CVE-2024-50131, CVE-2024-53058, CVE-2024-50160, CVE-2024-50287, CVE-2024-40965, CVE-2024-50273, CVE-2024-50268, CVE-2024-50302, CVE-2024-50218, CVE-2024-50199, CVE-2024-50196, CVE-2024-50083, CVE-2024-50244, CVE-2024-50117, CVE-2024-50058, CVE-2024-53055, CVE-2024-50182, CVE-2024-53097, CVE-2024-50236, CVE-2024-50162, CVE-2024-50301, CVE-2024-50249, CVE-2024-50292, CVE-2024-50150, CVE-2024-50153, CVE-2024-50115, CVE-2024-26718, CVE-2024-53104, CVE-2024-42252, CVE-2024-53066, CVE-2024-50148, CVE-2024-53042, CVE-2024-50230, CVE-2024-41066) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS linux-image-5.15.0-1073-intel-iotg 5.15.0-1073.79 linux-image-intel-iotg 5.15.0.1073.73 Ubuntu 20.04 LTS linux-image-5.15.0-1073-intel-iotg 5.15.0-1073.79~20.04.2 linux-image-intel 5.15.0.1073.79~20.04.2 linux-image-intel-iotg 5.15.0.1073.79~20.04.2 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-7289-4 https://ubuntu.com/security/notices/USN-7289-3 https://ubuntu.com/security/notices/USN-7289-2 https://ubuntu.com/security/notices/USN-7289-1 CVE-2023-52913, CVE-2024-26718, CVE-2024-35887, CVE-2024-39497, CVE-2024-40953, CVE-2024-40965, CVE-2024-41066, CVE-2024-41080, CVE-2024-42252, CVE-2024-42291, CVE-2024-50010, CVE-2024-50036, CVE-2024-50058, CVE-2024-50072, CVE-2024-50074, CVE-2024-50082, CVE-2024-50083, CVE-2024-50085, CVE-2024-50086, CVE-2024-50099, CVE-2024-50101, CVE-2024-50103, CVE-2024-50110, CVE-2024-50115, CVE-2024-50116, CVE-2024-50117, CVE-2024-50127, CVE-2024-50128, CVE-2024-50131, CVE-2024-50134, CVE-2024-50141, CVE-2024-50142, CVE-2024-50143, CVE-2024-50148, CVE-2024-50150, CVE-2024-50151, CVE-2024-50153, CVE-2024-50154, CVE-2024-50156, CVE-2024-50160, CVE-2024-50162, CVE-2024-50163, CVE-2024-50167, CVE-2024-50168, CVE-2024-50171, CVE-2024-50182, CVE-2024-50185, CVE-2024-50192, CVE-2024-50193, CVE-2024-50194, CVE-2024-50195, CVE-2024-50196, CVE-2024-50198, CVE-2024-50199, CVE-2024-50201, CVE-2024-50202, CVE-2024-50205, CVE-2024-50208, CVE-2024-50209, CVE-2024-50218, CVE-2024-50229, CVE-2024-50230, CVE-2024-50232, CVE-2024-50233, CVE-2024-50234, CVE-2024-50236, CVE-2024-50237, CVE-2024-50244, CVE-2024-50245,CVE-2024-50247, CVE-2024-50249, CVE-2024-50251, CVE-2024-50257, CVE-2024-50259, CVE-2024-50262, CVE-2024-50265, CVE-2024-50267, CVE-2024-50268, CVE-2024-50269, CVE-2024-50273, CVE-2024-50278, CVE-2024-50279, CVE-2024-50282, CVE-2024-50287, CVE-2024-50290, CVE-2024-50292, CVE-2024-50295, CVE-2024-50296, CVE-2024-50299, CVE-2024-50301, CVE-2024-50302, CVE-2024-53042, CVE-2024-53052, CVE-2024-53055, CVE-2024-53058, CVE-2024-53059, CVE-2024-53061, CVE-2024-53063, CVE-2024-53066, CVE-2024-53088, CVE-2024-53097, CVE-2024-53101, CVE-2024-53104 Package Information: https://launchpad.net/ubuntu/+source/linux-intel-iotg/5.15.0-1073.79 https://launchpad.net/ubuntu/+source/linux-intel-iotg-5.15/5.15.0-1073.79~20.04.2 . Enhancements for the Linux kernel tackling several vulnerabilities in Ubuntu 20.04 and 22.04 LTS provide substantial remedies.. Kernel Updates, Linux Kernel Security, Ubuntu Security Notice, Linux Security Issues. . LinuxSecurity.com Team
Feb 27, 2025
Ubuntu
89
security advisorycritical issuekernel updateFedora 35 Kernel Update 5.18.11 Security Advisory - Urgent RetBleed Fixes
The 5.18.11 stable kernel update contains a number of important fixes across the tree. In addition to the 5.18.11 stable patches, this build contains the retbleed patches scheduled for 5.18.12 kernels.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-8aab5b5cde 2022-07-15 01:35:20.762802 --------------------------------------------------------------------------------Name : kernel Product : Fedora 35 Version : 5.18.11 Release : 100.fc35 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package --------------------------------------------------------------------------------Update Information: The 5.18.11 stable kernel update contains a number of important fixes across the tree. In addition to the 5.18.11 stable patches, this build contains the retbleed patches scheduled for 5.18.12 kernels. --------------------------------------------------------------------------------ChangeLog: * Tue Jul 12 2022 Justin M. Forbes [5.18.11-100] - Turn on configs for retbleed (Justin M. Forbes) * Tue Jul 12 2022 Justin M. Forbes [5.18.11-0] - x86/static_call: Serialize __static_call_fixup() properly (Thomas Gleixner) - x86/speculation: Disable RRSBA behavior (Pawan Gupta) - x86/kexec: Disable RET on kexec (Konrad Rzeszutek Wilk) - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Thadeu Lima de Souza Cascardo) - x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry (Peter Zijlstra) - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Pawan Gupta) - x86/retbleed: Add fine grained Kconfig knobs (Peter Zijlstra) - x86/cpu/amd: Enumerate BTC_NO (Andrew Cooper) - x86/common: Stamp out the stepping madness (Peter Zijlstra) - KVM: VMX: Prevent RSB underflow before vmenter (Josh Poimboeuf) - x86/speculation: Fill RSB on vmexit for IBRS (Josh Poimboeuf) - KVM: VMX: Fix IBRS handling after vmexit (Josh Poimboeuf) - KVM: VMX: Preventguest RSB poisoning attacks with eIBRS (Josh Poimboeuf) - KVM: VMX: Convert launched argument to flags (Josh Poimboeuf) - KVM: VMX: Flatten __vmx_vcpu_run() (Josh Poimboeuf) - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} (Josh Poimboeuf) - x86/speculation: Remove x86_spec_ctrl_mask (Josh Poimboeuf) - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit (Josh Poimboeuf) - x86/speculation: Fix SPEC_CTRL write on SMT state change (Josh Poimboeuf) - x86/speculation: Fix firmware entry SPEC_CTRL handling (Josh Poimboeuf) - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n (Josh Poimboeuf) - x86/cpu/amd: Add Spectral Chicken (Peter Zijlstra) - objtool: Add entry UNRET validation (Thadeu Lima de Souza Cascardo) - x86/bugs: Do IBPB fallback check only once (Josh Poimboeuf) - x86/bugs: Add retbleed=ibpb (Peter Zijlstra) - x86/xen: Add UNTRAIN_RET (Peter Zijlstra) - x86/xen: Rename SYS* entry points (Peter Zijlstra) - objtool: Update Retpoline validation (Peter Zijlstra) - intel_idle: Disable IBRS during long idle (Peter Zijlstra) - x86/bugs: Report Intel retbleed vulnerability (Peter Zijlstra) - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() (Peter Zijlstra) - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Pawan Gupta) - x86/bugs: Optimize SPEC_CTRL MSR writes (Peter Zijlstra) - x86/entry: Add kernel IBRS implementation (Thadeu Lima de Souza Cascardo) - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Peter Zijlstra) - x86/bugs: Enable STIBP for JMP2RET (Kim Phillips) - x86/bugs: Add AMD retbleed= boot parameter (Alexandre Chartre) - x86/bugs: Report AMD retbleed vulnerability (Alexandre Chartre) - x86: Add magic AMD return-thunk (Thadeu Lima de Souza Cascardo) - objtool: Treat .text.__x86.* as noinstr (Peter Zijlstra) - x86/entry: Avoid very early RET (Peter Zijlstra) - x86: Use return-thunk in asm code (Peter Zijlstra) - x86/sev: Avoid using __x86_return_thunk (Kim Phillips) - x86/vsyscall_emu/64: Don't useRET in vsyscall emulation (Peter Zijlstra) - x86/kvm: Fix SETcc emulation for return thunks (Peter Zijlstra) - x86/bpf: Use alternative RET encoding (Peter Zijlstra) - x86/ftrace: Use alternative RET encoding (Peter Zijlstra) - x86,static_call: Use alternative RET encoding (Peter Zijlstra) - objtool: skip non-text sections when adding return-thunk sites (Thadeu Lima de Souza Cascardo) - x86,objtool: Create .return_sites (Peter Zijlstra) - x86: Undo return-thunk damage (Peter Zijlstra) - x86/retpoline: Use -mfunction-return (Peter Zijlstra) - x86/retpoline: Swizzle retpoline thunk (Peter Zijlstra) - x86/retpoline: Cleanup some #ifdefery (Peter Zijlstra) - x86/cpufeatures: Move RETPOLINE flags to word 11 (Peter Zijlstra) - x86/kvm/vmx: Make noinstr clean (Peter Zijlstra) - x86/entry: Remove skip_r11rcx (Peter Zijlstra) - x86/entry: Don't call error_entry() for XENPV (Lai Jiangshan) - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (Lai Jiangshan) - x86/entry: Switch the stack after error_entry() returns (Lai Jiangshan) - x86/traps: Use pt_regs directly in fixup_bad_iret() (Lai Jiangshan) --------------------------------------------------------------------------------References: [ 1 ] Bug #2090226 - CVE-2022-23816 CVE-2022-29900 hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions https://bugzilla.redhat.com/show_bug.cgi?id=2090226 [ 2 ] Bug #2103148 - CVE-2022-29901 hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions https://bugzilla.redhat.com/show_bug.cgi?id=2103148 [ 3 ] Bug #2103153 - CVE-2022-23825 hw: cpu: AMD: Branch Type Confusion (non-retbleed) https://bugzilla.redhat.com/show_bug.cgi?id=2103153 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-8aab5b5cde' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jul 14, 2022
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!