linux, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-kvm, linux-raspi vulnerabilities
Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - SCSI subsystem; - Ext4 file system; - Bluetooth subsystem; - Memory management; - Amateur Radio drivers; - Network traffic control; - Sun RPC protocol; - VMware vSockets driver; (CVE-2023-52821, CVE-2024-40910, CVE-2024-43892, CVE-2024-49967, CVE-2024-50264, CVE-2024-36952, CVE-2024-38553, CVE-2021-47101, CVE-2021-47001, CVE-2024-35965, CVE-2024-35963, CVE-2024-35966, CVE-2024-35967, CVE-2024-53057, CVE-2024-38597)
02 / AFFECTED SOFTWARE
Affected packages
110 explicit affected versions
102 explicit affected versions
97 explicit affected versions
90 explicit affected versions
90 explicit affected versions
99 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - SCSI subsystem; - Ext4 file system; - Bluetooth subsystem; - Memory management; - Amateur Radio drivers; - Network traffic control; - Sun RPC protocol; - VMware vSockets driver; (CVE-2023-52821, CVE-2024-40910, CVE-2024-43892, CVE-2024-49967, CVE-2024-50264, CVE-2024-36952, CVE-2024-38553, CVE-2021-47101, CVE-2021-47001, CVE-2024-35965, CVE-2024-35963, CVE-2024-35966, CVE-2024-35967, CVE-2024-53057, CVE-2024-38597)
05 / REFERENCES
Further evidence
- https://ubuntu.com/security/CVE-2021-47001
- https://ubuntu.com/security/CVE-2021-47101
- https://ubuntu.com/security/CVE-2022-38096
- https://ubuntu.com/security/CVE-2023-52821
- https://ubuntu.com/security/CVE-2024-35963
- https://ubuntu.com/security/CVE-2024-35965
- https://ubuntu.com/security/CVE-2024-35966
- https://ubuntu.com/security/CVE-2024-35967
- https://ubuntu.com/security/CVE-2024-36952
- https://ubuntu.com/security/CVE-2024-38553
- https://ubuntu.com/security/CVE-2024-38597
- https://ubuntu.com/security/CVE-2024-40910
- https://ubuntu.com/security/CVE-2024-43892
- https://ubuntu.com/security/CVE-2024-49967
- https://ubuntu.com/security/CVE-2024-50264
- https://ubuntu.com/security/CVE-2024-53057
- https://ubuntu.com/security/notices/USN-7173-1