Critical Vulnerabilities in Linux Kernel and Related Packages
Summary
USN-6938-1: linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities. Affects linux-aws versions < 4.4.0-1134.140. Fixed in 4.4.0-1134.140. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential services such as process management, memory management, and device control. The affected packages include linux, linux-aws, linux-kvm, and linux-lts-xenial, which are tailored for specific environments like AWS and KVM virtualization. These packages are crucial for system stability and performance, making their security paramount.
Vulnerability Detail
Multiple vulnerabilities have been discovered in the Linux kernel, including improper handling of event codes in the device input subsystem, leading to potential denial of service (system crash). Additionally, issues in the NFC Controller Interface and Bluetooth subsystem could allow local attackers to exploit these weaknesses, resulting in system crashes or unauthorized access. The vulnerabilities stem from inadequate memory allocation checks and race conditions, affecting various subsystems such as GPU drivers, HID, I2C, and networking.
How To Fix
Minimum fixed version
4.4.0-1134.140
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linux-awsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected systems or disable specific functionalities that rely on the vulnerable subsystems until the updates are applied. This may involve modifying system configurations or restricting user permissions.
Conclusion
The vulnerabilities in the Linux kernel and related packages pose significant risks to system stability and security. It is crucial for users to update their systems promptly to the patched versions to mitigate these risks. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux-aws →
FAQ
These vulnerabilities can lead to system crashes, denial of service, and potential unauthorized access by local attackers.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The vulnerabilities are associated with multiple CVEs, including CVE-2022-48619, CVE-2023-46343, CVE-2024-24857, and others.
Yes, you can limit access to the affected systems or disable functionalities that rely on the vulnerable subsystems as a temporary workaround.
It is recommended to regularly check for updates, ideally weekly or bi-weekly, to ensure your system remains secure against known vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for linux-aws.
