linux-aws, linux-aws-5.4, linux-bluefield, linux-ibm, linux-ibm-5.4, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities
Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - SCSI subsystem; - Ext4 file system; - Bluetooth subsystem; - Memory management; - Amateur Radio drivers; - Network traffic control; - Sun RPC protocol; - VMware vSockets driver; (CVE-2023-52821, CVE-2024-40910, CVE-2024-43892, CVE-2024-49967, CVE-2024-50264, CVE-2024-36952, CVE-2024-38553, CVE-2021-47101, CVE-2021-47001, CVE-2024-35965, CVE-2024-35963, CVE-2024-35966, CVE-2024-35967, CVE-2024-53057, CVE-2024-38597)
02 / AFFECTED SOFTWARE
Affected packages
102 explicit affected versions
61 explicit affected versions
67 explicit affected versions
100 explicit affected versions
36 explicit affected versions
89 explicit affected versions
60 explicit affected versions
89 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - SCSI subsystem; - Ext4 file system; - Bluetooth subsystem; - Memory management; - Amateur Radio drivers; - Network traffic control; - Sun RPC protocol; - VMware vSockets driver; (CVE-2023-52821, CVE-2024-40910, CVE-2024-43892, CVE-2024-49967, CVE-2024-50264, CVE-2024-36952, CVE-2024-38553, CVE-2021-47101, CVE-2021-47001, CVE-2024-35965, CVE-2024-35963, CVE-2024-35966, CVE-2024-35967, CVE-2024-53057, CVE-2024-38597)
05 / REFERENCES
Further evidence
- https://ubuntu.com/security/CVE-2021-47001
- https://ubuntu.com/security/CVE-2021-47101
- https://ubuntu.com/security/CVE-2022-38096
- https://ubuntu.com/security/CVE-2023-52821
- https://ubuntu.com/security/CVE-2024-35963
- https://ubuntu.com/security/CVE-2024-35965
- https://ubuntu.com/security/CVE-2024-35966
- https://ubuntu.com/security/CVE-2024-35967
- https://ubuntu.com/security/CVE-2024-36952
- https://ubuntu.com/security/CVE-2024-38553
- https://ubuntu.com/security/CVE-2024-38597
- https://ubuntu.com/security/CVE-2024-40910
- https://ubuntu.com/security/CVE-2024-43892
- https://ubuntu.com/security/CVE-2024-49967
- https://ubuntu.com/security/CVE-2024-50264
- https://ubuntu.com/security/CVE-2024-53057
- https://ubuntu.com/security/notices/USN-7173-2