linux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle vulnerabilities
Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - TTY drivers; - SMB network file system; - Netfilter; - Bluetooth subsystem; (CVE-2024-26886, CVE-2024-26952, CVE-2023-52752, CVE-2024-27017, CVE-2024-36016)
02 / AFFECTED SOFTWARE
Affected packages
38 explicit affected versions
41 explicit affected versions
32 explicit affected versions
41 explicit affected versions
55 explicit affected versions
50 explicit affected versions
49 explicit affected versions
48 explicit affected versions
41 explicit affected versions
38 explicit affected versions
52 explicit affected versions
52 explicit affected versions
33 explicit affected versions
49 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - TTY drivers; - SMB network file system; - Netfilter; - Bluetooth subsystem; (CVE-2024-26886, CVE-2024-26952, CVE-2023-52752, CVE-2024-27017, CVE-2024-36016)
05 / REFERENCES
Further evidence
- https://ubuntu.com/security/CVE-2023-52752
- https://ubuntu.com/security/CVE-2024-25742
- https://ubuntu.com/security/CVE-2024-26886
- https://ubuntu.com/security/CVE-2024-26952
- https://ubuntu.com/security/CVE-2024-27017
- https://ubuntu.com/security/CVE-2024-36016
- https://ubuntu.com/security/notices/USN-6923-1