CVE-2024-26882
Publication date 17 April 2024
Last updated 30 August 2024
Ubuntu priority
In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() Apply the same fix than ones found in : 8d975c15c0cd ("ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()") 1ca1ba465e55 ("geneve: make sure to pull inner header in geneve_rx()") We have to save skb->network_header in a temporary variable in order to be able to recompute the network_header pointer after a pskb_inet_may_pull() call. pskb_inet_may_pull() makes sure the needed headers are in skb->head. syzbot reported: BUG: KMSAN: uninit-value in __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline] BUG: KMSAN: uninit-value in INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline] BUG: KMSAN: uninit-value in IP_ECN_decapsulate include/net/inet_ecn.h:302 [inline] BUG: KMSAN: uninit-value in ip_tunnel_rcv+0xed9/0x2ed0 net/ipv4/ip_tunnel.c:409 __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline] INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline] IP_ECN_decapsulate include/net/inet_ecn.h:302 [inline] ip_tunnel_rcv+0xed9/0x2ed0 net/ipv4/ip_tunnel.c:409 __ipgre_rcv+0x9bc/0xbc0 net/ipv4/ip_gre.c:389 ipgre_rcv net/ipv4/ip_gre.c:411 [inline] gre_rcv+0x423/0x19f0 net/ipv4/ip_gre.c:447 gre_rcv+0x2a4/0x390 net/ipv4/gre_demux.c:163 ip_protocol_deliver_rcu+0x264/0x1300 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x2b8/0x440 net/ipv4/ip_input.c:233 NF_HOOK include/linux/netfilter.h:314 [inline] ip_local_deliver+0x21f/0x490 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:461 [inline] ip_rcv_finish net/ipv4/ip_input.c:449 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] ip_rcv+0x46f/0x760 net/ipv4/ip_input.c:569 __netif_receive_skb_one_core net/core/dev.c:5534 [inline] __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5648 netif_receive_skb_internal net/core/dev.c:5734 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5793 tun_rx_batched+0x3ee/0x980 drivers/net/tun.c:1556 tun_get_user+0x53b9/0x66e0 drivers/net/tun.c:2009 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2055 call_write_iter include/linux/fs.h:2087 [inline] new_sync_write fs/read_write.c:497 [inline] vfs_write+0xb6b/0x1520 fs/read_write.c:590 ksys_write+0x20f/0x4c0 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:652 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b Uninit was created at: __alloc_pages+0x9a6/0xe00 mm/page_alloc.c:4590 alloc_pages_mpol+0x62b/0x9d0 mm/mempolicy.c:2133 alloc_pages+0x1be/0x1e0 mm/mempolicy.c:2204 skb_page_frag_refill+0x2bf/0x7c0 net/core/sock.c:2909 tun_build_skb drivers/net/tun.c:1686 [inline] tun_get_user+0xe0a/0x66e0 drivers/net/tun.c:1826 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2055 call_write_iter include/linux/fs.h:2087 [inline] new_sync_write fs/read_write.c:497 [inline] vfs_write+0xb6b/0x1520 fs/read_write.c:590 ksys_write+0x20f/0x4c0 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:652 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| linux | 24.04 LTS noble |
Fixed 6.8.0-35.35
|
| 22.04 LTS jammy |
Fixed 5.15.0-112.122
|
|
| 20.04 LTS focal |
Fixed 5.4.0-189.209
|
|
| 18.04 LTS bionic |
Fixed 4.15.0-227.239
|
|
| 16.04 LTS xenial |
Fixed 4.4.0-257.291
|
|
| 14.04 LTS trusty |
Fixed 3.13.0-198.249
|
|
| linux-allwinner-5.19 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-aws | 24.04 LTS noble |
Fixed 6.8.0-1009.9
|
| 22.04 LTS jammy |
Fixed 5.15.0-1063.69
|
|
| 20.04 LTS focal |
Fixed 5.4.0-1128.138
|
|
| 18.04 LTS bionic |
Fixed 4.15.0-1170.183
|
|
| 16.04 LTS xenial |
Fixed 4.4.0-1172.187
|
|
| 14.04 LTS trusty |
Fixed 4.4.0-1134.140
|
|
| linux-aws-5.0 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| linux-aws-5.11 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-aws-5.13 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-aws-5.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-1063.69~20.04.1
|
|
| linux-aws-5.19 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-aws-5.3 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| linux-aws-5.4 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Vulnerable, work in progress
|
|
| linux-aws-5.8 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-aws-6.2 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-aws-6.5 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-aws-fips | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-aws-hwe | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 16.04 LTS xenial |
Fixed 4.15.0-1170.183~16.04.1
|
|
| linux-azure | 24.04 LTS noble |
Fixed 6.8.0-1008.8
|
| 22.04 LTS jammy |
Fixed 5.15.0-1066.75
|
|
| 20.04 LTS focal |
Fixed 5.4.0-1133.140
|
|
| 18.04 LTS bionic | Ignored | |
| 16.04 LTS xenial |
Fixed 4.15.0-1179.194~16.04.1
|
|
| 14.04 LTS trusty |
Fixed 4.15.0-1179.194~14.04.1
|
|
| linux-azure-4.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Fixed 4.15.0-1179.194
|
|
| linux-azure-5.11 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-azure-5.13 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-azure-5.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-1065.74~20.04.1
|
|
| linux-azure-5.19 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-azure-5.3 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| linux-azure-5.4 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Fixed 5.4.0-1133.140~18.04.1
|
|
| linux-azure-5.8 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-azure-6.2 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-azure-6.5 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-azure-edge | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| linux-azure-fde | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy |
Fixed 5.15.0-1067.76.1
|
|
| 20.04 LTS focal | Ignored | |
| linux-azure-fde-5.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-1065.74~20.04.1.1
|
|
| linux-azure-fde-5.19 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-azure-fde-6.2 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-azure-fips | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-bluefield | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.4.0-1088.95
|
|
| linux-fips | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| linux-gcp | 24.04 LTS noble |
Fixed 6.8.0-1008.9
|
| 22.04 LTS jammy |
Fixed 5.15.0-1062.70
|
|
| 20.04 LTS focal |
Fixed 5.4.0-1132.141
|
|
| 18.04 LTS bionic | Ignored | |
| 16.04 LTS xenial |
Fixed 4.15.0-1164.181~16.04.1
|
|
| linux-gcp-4.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Fixed 4.15.0-1164.181
|
|
| linux-gcp-5.11 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-gcp-5.13 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-gcp-5.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-1062.70~20.04.1
|
|
| linux-gcp-5.19 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-gcp-5.3 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| linux-gcp-5.4 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Fixed 5.4.0-1132.141~18.04.1
|
|
| linux-gcp-5.8 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-gcp-6.2 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-gcp-6.5 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-gcp-fips | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-gke | 24.04 LTS noble |
Fixed 6.8.0-1004.7
|
| 22.04 LTS jammy |
Fixed 5.15.0-1060.66
|
|
| 20.04 LTS focal | Ignored | |
| linux-gke-4.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| linux-gke-5.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-gke-5.4 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| linux-gkeop | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy |
Fixed 5.15.0-1046.53
|
|
| 20.04 LTS focal |
Fixed 5.4.0-1095.99
|
|
| linux-gkeop-5.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-1046.53~20.04.1
|
|
| linux-gkeop-5.4 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| linux-hwe | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| 16.04 LTS xenial |
Fixed 4.15.0-227.239~16.04.1
|
|
| linux-hwe-5.11 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-hwe-5.13 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-hwe-5.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-113.123~20.04.1
|
|
| linux-hwe-5.19 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-hwe-5.4 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Fixed 5.4.0-189.209~18.04.1
|
|
| linux-hwe-5.8 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-hwe-6.2 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-hwe-6.5 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-hwe-6.8 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy |
Not affected
|
|
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-hwe-edge | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| 16.04 LTS xenial | Ignored | |
| linux-ibm | 24.04 LTS noble |
Fixed 6.8.0-1006.6
|
| 22.04 LTS jammy |
Fixed 5.15.0-1056.59
|
|
| 20.04 LTS focal |
Fixed 5.4.0-1075.80
|
|
| linux-ibm-5.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-1057.60~20.04.1
|
|
| linux-ibm-5.4 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Fixed 5.4.0-1075.80~18.04.1
|
|
| linux-intel | 24.04 LTS noble |
Not affected
|
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-intel-5.13 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-intel-iot-realtime | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-intel-iotg | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy |
Fixed 5.15.0-1058.64
|
|
| 20.04 LTS focal | Not in release | |
| linux-intel-iotg-5.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-1058.64~20.04.1
|
|
| linux-iot | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.4.0-1040.41
|
|
| linux-kvm | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy |
Fixed 5.15.0-1060.65
|
|
| 20.04 LTS focal |
Fixed 5.4.0-1116.123
|
|
| 18.04 LTS bionic |
Fixed 4.15.0-1154.159
|
|
| 16.04 LTS xenial |
Fixed 4.4.0-1135.145
|
|
| linux-laptop | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| linux-lowlatency | 24.04 LTS noble |
Fixed 6.8.0-35.35.1
|
| 22.04 LTS jammy |
Fixed 5.15.0-110.120
|
|
| 20.04 LTS focal | Not in release | |
| linux-lowlatency-hwe-5.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-110.120~20.04.1
|
|
| linux-lowlatency-hwe-5.19 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-lowlatency-hwe-6.2 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-lowlatency-hwe-6.5 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-lowlatency-hwe-6.8 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy |
Not affected
|
|
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-lts-xenial | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 14.04 LTS trusty |
Fixed 4.4.0-257.291~14.04.1
|
|
| linux-nvidia | 24.04 LTS noble |
Not affected
|
| 22.04 LTS jammy |
Fixed 5.15.0-1058.59
|
|
| 20.04 LTS focal | Not in release | |
| linux-nvidia-6.2 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-nvidia-6.5 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy |
Vulnerable
|
|
| 20.04 LTS focal | Not in release | |
| linux-nvidia-6.8 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy |
Not affected
|
|
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-nvidia-lowlatency | 24.04 LTS noble |
Not affected
|
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-oem | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| linux-oem-5.10 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-oem-5.13 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-oem-5.14 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-oem-5.17 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-oem-5.6 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-oem-6.0 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-oem-6.1 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-oem-6.5 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-oem-6.8 | 24.04 LTS noble |
Fixed 6.8.0-1006.6
|
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-oracle | 24.04 LTS noble |
Fixed 6.8.0-1006.6
|
| 22.04 LTS jammy |
Fixed 5.15.0-1061.67
|
|
| 20.04 LTS focal |
Fixed 5.4.0-1127.136
|
|
| 18.04 LTS bionic |
Fixed 4.15.0-1133.144
|
|
| 16.04 LTS xenial |
Fixed 4.15.0-1133.144~16.04.1
|
|
| linux-oracle-5.0 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| linux-oracle-5.11 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-oracle-5.13 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-oracle-5.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-1061.67~20.04.1
|
|
| linux-oracle-5.3 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored | |
| linux-oracle-5.4 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Fixed 5.4.0-1127.136~18.04.1
|
|
| linux-oracle-5.8 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-oracle-6.5 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-raspi | 24.04 LTS noble |
Fixed 6.8.0-1005.5
|
| 22.04 LTS jammy |
Fixed 5.15.0-1058.61
|
|
| 20.04 LTS focal |
Fixed 5.4.0-1112.124
|
|
| linux-raspi-5.4 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Vulnerable, work in progress
|
|
| linux-raspi-realtime | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-raspi2 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-realtime | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-riscv | 24.04 LTS noble |
Fixed 6.8.0-35.35.1
|
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Ignored | |
| linux-riscv-5.11 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-riscv-5.15 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-1059.63~20.04.1
|
|
| linux-riscv-5.19 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-riscv-5.8 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Ignored | |
| linux-riscv-6.5 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-riscv-6.8 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy |
Not affected
|
|
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-starfive | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| linux-starfive-5.19 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-starfive-6.2 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-starfive-6.5 | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Not in release | |
| linux-xilinx-zynqmp | 24.04 LTS noble | Not in release |
| 22.04 LTS jammy |
Fixed 5.15.0-1030.34
|
|
| 20.04 LTS focal |
Fixed 5.4.0-1047.51
|
Get expanded security coverage with Ubuntu Pro
Reduce your average CVE exposure time from 98 days to 1 day with expanded CVE patching, ten-years security maintenance and optional support for the full stack of open-source applications. Free for personal use.
Get Ubuntu ProSeverity score breakdown
| Parameter | Value |
|---|---|
| Base score |
7.8 · High
|
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
References
Related Ubuntu Security Notices (USN)
- USN-6816-1
- Linux kernel vulnerabilities
- 7 June 2024
- USN-6817-1
- Linux kernel vulnerabilities
- 7 June 2024
- USN-6820-1
- Linux kernel vulnerabilities
- 7 June 2024
- USN-6821-1
- Linux kernel vulnerabilities
- 7 June 2024
- USN-6821-2
- Linux kernel vulnerabilities
- 10 June 2024
- USN-6817-2
- Linux kernel (OEM) vulnerabilities
- 11 June 2024
- USN-6820-2
- Linux kernel (NVIDIA) vulnerabilities
- 11 June 2024
- USN-6828-1
- Linux kernel (Intel IoTG) vulnerabilities
- 11 June 2024
- USN-6821-3
- Linux kernel (AWS) vulnerabilities
- 11 June 2024
- USN-6821-4
- Linux kernel (Azure) vulnerabilities
- 14 June 2024
- USN-6817-3
- Linux kernel vulnerabilities
- 14 June 2024
- USN-6871-1
- Linux kernel (HWE) vulnerabilities
- 4 July 2024
- USN-6878-1
- Linux kernel (Oracle) vulnerabilities
- 4 July 2024
- USN-6892-1
- Linux kernel (IBM) vulnerabilities
- 10 July 2024
- USN-6896-1
- Linux kernel vulnerabilities
- 12 July 2024
- USN-6896-2
- Linux kernel vulnerabilities
- 16 July 2024
- USN-6896-3
- Linux kernel vulnerabilities
- 17 July 2024
- USN-6896-4
- Linux kernel vulnerabilities
- 19 July 2024
- USN-6896-5
- Linux kernel vulnerabilities
- 23 July 2024
- USN-6919-1
- Linux kernel vulnerabilities
- 26 July 2024
- USN-6925-1
- Linux kernel vulnerability
- 29 July 2024
- USN-6926-1
- Linux kernel vulnerabilities
- 29 July 2024
- USN-6938-1
- Linux kernel vulnerabilities
- 31 July 2024
- USN-6926-2
- Linux kernel vulnerabilities
- 1 August 2024
- USN-6926-3
- Linux kernel (Azure) vulnerabilities
- 9 August 2024
Other references
- https://www.cve.org/CVERecord?id=CVE-2024-26882
- https://git.kernel.org/linus/b0ec2abf98267f14d032102551581c833b0659d3 (6.9-rc1)
- https://git.kernel.org/stable/c/ec6bb01e02cbd47781dd90775b631a1dc4bd9d2b
- https://git.kernel.org/stable/c/77fd5294ea09b21f6772ac954a121b87323cec80
- https://git.kernel.org/stable/c/5c03387021cfa3336b97e0dcba38029917a8af2a
- https://git.kernel.org/stable/c/60044ab84836359534bd7153b92e9c1584140e4a
- https://git.kernel.org/stable/c/c4c857723b37c20651300b3de4ff25059848b4b0
- https://git.kernel.org/stable/c/f6723d8dbfdc10c784a56748f86a9a3cd410dbd5
- https://git.kernel.org/stable/c/ca914f1cdee8a85799942c9b0ce5015bbd6844e1
- https://git.kernel.org/stable/c/b0ec2abf98267f14d032102551581c833b0659d3