It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. ( CVE-2024-36331 ) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: ARM64 architecture; PowerPC architecture; S390 architecture; x86 architecture; Network block device driver; Character device driver; Clock framework and drivers; Data acquisition framework and drivers; Hardware crypto device drivers; Device frequency scaling framework; DMA engine subsystem; EDAC drivers; GPU drivers; HID subsystem; Hardware monitoring drivers; I2C subsystem; IIO...
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. ( CVE-2024-36331 )
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. ( CVE-2024-36331 ) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: ARM64 architecture; PowerPC architecture; S390 architecture; x86 architecture; Network block device driver; Character device driver; Clock framework and drivers; Data acquisition framework and drivers; Hardware crypto device drivers; Device frequency scaling framework; DMA engine subsystem; EDAC drivers; GPU drivers; HID subsystem; Hardware monitoring drivers; I2C subsystem; IIO subsystem; IIO ADC drivers; InfiniBand drivers; Input Device core drivers; Multiple devices driver; Media drivers; Network drivers; Mellanox network drivers; PCI subsystem; PHY drivers; Pin controllers subsystem; x86 platform drivers; Power supply drivers; Powercap sysfs driver; Voltage and Current Regulator drivers; S/390 drivers; ASPEED SoC drivers; SPI subsystem; small TFT LCD display modules; Media staging drivers; USB Gadget drivers; vDPA drivers; VFIO drivers; Framebuffer layer; Xen hypervisor drivers; BTRFS file system; Ceph distributed file system; EFI Variable file system; File systems infrastructure; F2FS file system; GFS2 file system; Network file systems library; Network file system (NFS) client; Network file system (NFS) server daemon; NILFS2 file system; NTFS3 file system; Proc file system; SMB network file system; DRM display driver; io_uring subsystem; Internal shared memory driver; padata parallel execution mechanism; Networking subsytem; Bluetooth subsystem; Netfilter; UDP network protocol; Tracing infrastructure; BPF subsystem; Perf events; Padata parallel execution mechanism; Codetag library; KASAN memory debugging framework; Memory management; 802.1Q VLAN protocol; Appletalk network protocol; Asynchronous Transfer Mode (ATM) subsystem; Networking core; IPv4 networking; IPv6 networking; MAC80211 subsystem; Multipath TCP; Netlink; RxRPC session sockets; Network traffic control; SMC sockets; Sun RPC protocol; TIPC protocol; TLS protocol; VMware vSockets driver; Wireless networking; XFRM subsystem; ADI SoundPort AD1816A based soundcard drivers; MediaTek ASoC drivers; SOF drivers; USB sound devices; KVM subsystem
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. ( CVE-2024-36331 )
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
After a standard system update you need to reboot your computer to make all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
The problem can be corrected by updating your system to the following package versions:
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.
Have additional questions?
Talk to a member of the team ›
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
