Ubuntu: (Multiple Advisories) (CVE-2024-26707): Linux kernel vulnerabilities
Description
In the Linux kernel, the following vulnerability has been resolved: net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() Syzkaller reported [1] hitting a warning after failing to allocate resources for skb in hsr_init_skb(). Since a WARN_ONCE() call will not help much in this case, it might be prudent to switch to netdev_warn_once(). At the very least it will suppress syzkaller reports such as [1]. Just in case, use netdev_warn_once() in send_prp_supervision_frame() for similar reasons. [1] HSR: Could not send supervision frame WARNING: CPU: 1 PID: 85 at net/hsr/hsr_device.c:294 send_hsr_supervision_frame+0x60a/0x810 net/hsr/hsr_device.c:294 RIP: 0010:send_hsr_supervision_frame+0x60a/0x810 net/hsr/hsr_device.c:294 ... Call Trace: <IRQ> hsr_announce+0x114/0x370 net/hsr/hsr_device.c:382 call_timer_fn+0x193/0x590 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x764/0xb20 kernel/time/timer.c:2022 run_timer_softirq+0x58/0xd0 kernel/time/timer.c:2035 __do_softirq+0x21a/0x8de kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1076 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 ... This issue is also found in older kernels (at least up to 5.10).
Solution(s)
- ubuntu-upgrade-linux-image-5-15-0-1044-gkeop
- ubuntu-upgrade-linux-image-5-15-0-1054-ibm
- ubuntu-upgrade-linux-image-5-15-0-1054-nvidia
- ubuntu-upgrade-linux-image-5-15-0-1054-nvidia-lowlatency
- ubuntu-upgrade-linux-image-5-15-0-1054-raspi
- ubuntu-upgrade-linux-image-5-15-0-1057-intel-iotg
- ubuntu-upgrade-linux-image-5-15-0-1058-gke
- ubuntu-upgrade-linux-image-5-15-0-1058-intel-iotg
- ubuntu-upgrade-linux-image-5-15-0-1058-kvm
- ubuntu-upgrade-linux-image-5-15-0-1059-gcp
- ubuntu-upgrade-linux-image-5-15-0-1059-oracle
- ubuntu-upgrade-linux-image-5-15-0-106-generic
- ubuntu-upgrade-linux-image-5-15-0-106-generic-64k
- ubuntu-upgrade-linux-image-5-15-0-106-generic-lpae
- ubuntu-upgrade-linux-image-5-15-0-106-lowlatency
- ubuntu-upgrade-linux-image-5-15-0-106-lowlatency-64k
- ubuntu-upgrade-linux-image-5-15-0-1061-aws
- ubuntu-upgrade-linux-image-5-15-0-1063-azure
- ubuntu-upgrade-linux-image-5-15-0-1063-azure-fde
- ubuntu-upgrade-linux-image-6-5-0-1017-starfive
- ubuntu-upgrade-linux-image-6-5-0-1020-raspi
- ubuntu-upgrade-linux-image-6-5-0-1023-aws
- ubuntu-upgrade-linux-image-6-5-0-1023-nvidia
- ubuntu-upgrade-linux-image-6-5-0-1023-nvidia-64k
- ubuntu-upgrade-linux-image-6-5-0-1024-azure
- ubuntu-upgrade-linux-image-6-5-0-1024-azure-fde
- ubuntu-upgrade-linux-image-6-5-0-1024-gcp
- ubuntu-upgrade-linux-image-6-5-0-1026-oracle
- ubuntu-upgrade-linux-image-6-5-0-1026-oracle-64k
- ubuntu-upgrade-linux-image-6-5-0-44-generic
- ubuntu-upgrade-linux-image-6-5-0-44-generic-64k
- ubuntu-upgrade-linux-image-6-5-0-44-lowlatency
- ubuntu-upgrade-linux-image-6-5-0-44-lowlatency-64k
- ubuntu-upgrade-linux-image-aws
- ubuntu-upgrade-linux-image-aws-lts-22-04
- ubuntu-upgrade-linux-image-azure
- ubuntu-upgrade-linux-image-azure-cvm
- ubuntu-upgrade-linux-image-azure-fde
- ubuntu-upgrade-linux-image-azure-fde-lts-22-04
- ubuntu-upgrade-linux-image-azure-lts-22-04
- ubuntu-upgrade-linux-image-gcp
- ubuntu-upgrade-linux-image-gcp-lts-22-04
- ubuntu-upgrade-linux-image-generic
- ubuntu-upgrade-linux-image-generic-64k
- ubuntu-upgrade-linux-image-generic-64k-hwe-20-04
- ubuntu-upgrade-linux-image-generic-64k-hwe-22-04
- ubuntu-upgrade-linux-image-generic-hwe-20-04
- ubuntu-upgrade-linux-image-generic-hwe-22-04
- ubuntu-upgrade-linux-image-generic-lpae
- ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04
- ubuntu-upgrade-linux-image-gke
- ubuntu-upgrade-linux-image-gke-5-15
- ubuntu-upgrade-linux-image-gkeop
- ubuntu-upgrade-linux-image-gkeop-5-15
- ubuntu-upgrade-linux-image-ibm
- ubuntu-upgrade-linux-image-intel
- ubuntu-upgrade-linux-image-intel-iotg
- ubuntu-upgrade-linux-image-kvm
- ubuntu-upgrade-linux-image-lowlatency
- ubuntu-upgrade-linux-image-lowlatency-64k
- ubuntu-upgrade-linux-image-lowlatency-64k-hwe-20-04
- ubuntu-upgrade-linux-image-lowlatency-64k-hwe-22-04
- ubuntu-upgrade-linux-image-lowlatency-hwe-20-04
- ubuntu-upgrade-linux-image-lowlatency-hwe-22-04
- ubuntu-upgrade-linux-image-nvidia
- ubuntu-upgrade-linux-image-nvidia-6-5
- ubuntu-upgrade-linux-image-nvidia-64k-6-5
- ubuntu-upgrade-linux-image-nvidia-64k-hwe-22-04
- ubuntu-upgrade-linux-image-nvidia-hwe-22-04
- ubuntu-upgrade-linux-image-nvidia-lowlatency
- ubuntu-upgrade-linux-image-oem-20-04
- ubuntu-upgrade-linux-image-oem-20-04b
- ubuntu-upgrade-linux-image-oem-20-04c
- ubuntu-upgrade-linux-image-oem-20-04d
- ubuntu-upgrade-linux-image-oracle
- ubuntu-upgrade-linux-image-oracle-64k
- ubuntu-upgrade-linux-image-oracle-lts-22-04
- ubuntu-upgrade-linux-image-raspi
- ubuntu-upgrade-linux-image-raspi-nolpae
- ubuntu-upgrade-linux-image-starfive
- ubuntu-upgrade-linux-image-virtual
- ubuntu-upgrade-linux-image-virtual-hwe-20-04
- ubuntu-upgrade-linux-image-virtual-hwe-22-04
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center