Linux kernel vulnerabilities
Pengfei Wang discovered that the Turtle Beach MultiSound audio device driver in the Linux kernel contained race conditions when fetching from the ring-buffer, leading to an out-of-bounds access. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-9986) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - PCI subsystem; - SCSI subsystem; - Tracing infrastructure; - B.A.T.M.A.N. meshing protocol; - IUCV driver; (CVE-2022-49114, CVE-2023-52784, CVE-2024-53194, CVE-2024-532
Read at Ubuntu Security Notices
- Vendor
- Canonical, Linux kernel
- Product
- Linux kernel
- Exposure class
- Operating system
Why it ranks 34 (Notable)
- Product class: operating system
- Widely deployed vendor product (Canonical)
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)
- CVE-2017-9986 on this site · NVD · CVE.org · Vulnpedia
- CVE-2022-49114 on this site · NVD · CVE.org · Vulnpedia
- CVE-2023-52784 on this site · NVD · CVE.org · Vulnpedia
- CVE-2024-53194 on this site · NVD · CVE.org · Vulnpedia
- CVE-2024-53210 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.