FlawAtlas
Search the atlas
USN-7148-1 Not scored

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Lyu Tao discovered that the NFS implementation in the Linux kernel did not properly handle requests to open a directory on a regular file. A local attacker could use this to expose sensitive information (kernel memory). Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - ATM drivers; - Device frequency scaling framework; - GPU drivers; - Hardware monitoring drivers; - VMware VMCI Driver; - MTD block device drivers; - Network drivers; - Device tree and open firmware driver; - SCSI subsystem; - USB Serial drivers; - BTRFS file system; - File systems infrastructure; - F2FS file system; - JFS file system; - NILFS2 file system; - Netfilter; - Memory management; - Ethernet bridge; - IPv6 networking; - Logical Link layer; - MAC80211 subsystem; - NFC subsystem; - Network traffic control; (CVE-2021-47055, CVE-2024-26675, CVE-2024-42244, CVE-2024-46743, CVE-2024-41095, CVE-2024-46756, CVE-2024-46723, CVE-2024-46759, CVE-2024-35877, CVE-2024-38538, CVE-2024-26668, CVE-2024-44998, CVE-2024-42309, CVE-2024-46758, CVE-2024-46800, CVE-2022-48733, CVE-2023-52531, CVE-2023-52599, CVE-2024-46722, CVE-2024-42240, CVE-2024-44987, CVE-2023-52502, CVE-2023-52578, CVE-2024-41059, CVE-2024-41071, CVE-2024-44942, CVE-2024-46738, CVE-2022-48943, CVE-2023-52614, CVE-2024-27397, CVE-2024-38560, CVE-2024-43882, CVE-2024-42104, CVE-2024-46757, CVE-2024-26636, CVE-2024-26633, CVE-2024-41089, CVE-2024-42310, CVE-2022-48938)

Exploit probability Not scored
Published December 10, 2024
Required by Not available
Last source change August 6, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:Pro:14.04:LTS linux-aws

101 explicit affected versions

Ubuntu:Pro:14.04:LTS linux-lts-xenial

145 explicit affected versions

Ubuntu:Pro:16.04:LTS linux

168 explicit affected versions

Ubuntu:Pro:16.04:LTS linux-aws

125 explicit affected versions

Ubuntu:Pro:16.04:LTS linux-kvm

102 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities USN-7148-1

Lyu Tao discovered that the NFS implementation in the Linux kernel did not properly handle requests to open a directory on a regular file. A local attacker could use this to expose sensitive information (kernel memory). Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - ATM drivers; - Device frequency scaling framework; - GPU drivers; - Hardware monitoring drivers; - VMware VMCI Driver; - MTD block device drivers; - Network drivers; - Device tree and open firmware driver; - SCSI subsystem; - USB Serial drivers; - BTRFS file system; - File systems infrastructure; - F2FS file system; - JFS file system; - NILFS2 file system; - Netfilter; - Memory management; - Ethernet bridge; - IPv6 networking; - Logical Link layer; - MAC80211 subsystem; - NFC subsystem; - Network traffic control; (CVE-2021-47055, CVE-2024-26675, CVE-2024-42244, CVE-2024-46743, CVE-2024-41095, CVE-2024-46756, CVE-2024-46723, CVE-2024-46759, CVE-2024-35877, CVE-2024-38538, CVE-2024-26668, CVE-2024-44998, CVE-2024-42309, CVE-2024-46758, CVE-2024-46800, CVE-2022-48733, CVE-2023-52531, CVE-2023-52599, CVE-2024-46722, CVE-2024-42240, CVE-2024-44987, CVE-2023-52502, CVE-2023-52578, CVE-2024-41059, CVE-2024-41071, CVE-2024-44942, CVE-2024-46738, CVE-2022-48943, CVE-2023-52614, CVE-2024-27397, CVE-2024-38560, CVE-2024-43882, CVE-2024-42104, CVE-2024-46757, CVE-2024-26636, CVE-2024-26633, CVE-2024-41089, CVE-2024-42310, CVE-2022-48938)

View original source

05 / REFERENCES

Further evidence