Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.0
CVE-2024-26635: Linux kernel can crash when old token‑ring packets arrive
CVE-2024-26635 · published 2 years ago
Summary
The Linux kernel used in Debian and Ubuntu cloud versions could mishandle a rare type of network packet, leading to a crash. The problem was fixed by removing support for that packet type. Update your systems with the latest kernel patches to stay protected.
What to do
- Update debian linux to version 6.1.76-1.
- Update debian linux to version 6.6.15-1.
- Update canonical linux-aws to version 4.4.0-1131.137.
- Update canonical linux-azure to version 4.15.0-1177.192~14.04.1.
- Update canonical linux-lts-xenial to version 4.4.0-254.288~14.04.1.
- Update canonical linux to version 4.4.0-254.288.
- Update canonical linux-aws to version 4.4.0-1169.184.
- Update canonical linux-aws-hwe to version 4.15.0-1168.181~16.04.1.
- Update canonical linux-azure to version 4.15.0-1177.192~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1162.179~16.04.1.
- Update canonical linux-hwe to version 4.15.0-225.237~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1132.142.
- Update canonical linux-oracle to version 4.15.0-1131.142~16.04.1.
- Update canonical linux-fips to version 4.4.0-1101.108.
- Update canonical linux to version 4.15.0-225.237.
- Update canonical linux-aws to version 4.15.0-1168.181.
- Update canonical linux-aws-5.4 to version 5.4.0-1124.134~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1177.192.
- Update canonical linux-azure-5.4 to version 5.4.0-1129.136~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1162.179.
- Update canonical linux-gcp-5.4 to version 5.4.0-1128.137~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-181.201~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1071.76~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1152.157.
- Update canonical linux-oracle to version 4.15.0-1131.142.
- Update canonical linux-oracle-5.4 to version 5.4.0-1123.132~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1108.120~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2107.113.
- Update canonical linux-azure-fips to version 4.15.0-2086.92.
- Update canonical linux-fips to version 4.15.0-1123.134.
- Update canonical linux-gcp-fips to version 4.15.0-2070.75.
- Update canonical linux to version 5.4.0-181.201.
- Update canonical linux-aws to version 5.4.0-1124.134.
- Update canonical linux-aws-5.15 to version 5.15.0-1061.67~20.04.1.
- Update canonical linux-azure to version 5.4.0-1129.136.
- Update canonical linux-azure-5.15 to version 5.15.0-1063.72~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1084.91.
- Update canonical linux-gcp to version 5.4.0-1128.137.
- Update canonical linux-gcp-5.15 to version 5.15.0-1059.67~20.04.1.
- Update canonical linux-gkeop to version 5.4.0-1091.95.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1044.51~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-106.116~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1071.76.
- Update canonical linux-ibm-5.15 to version 5.15.0-1054.57~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1058.64~20.04.1.
- Update canonical linux-iot to version 5.4.0-1036.37.
- Update canonical linux-kvm to version 5.4.0-1112.119.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-106.116~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1027.27~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1123.132.
- Update canonical linux-oracle-5.15 to version 5.15.0-1059.65~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1108.120.
- Update canonical linux-riscv-5.15 to version 5.15.0-1057.61~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1043.47.
- Update canonical linux-aws-fips to version 5.4.0-1124.134+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1129.136+fips1.
- Update canonical linux-fips to version 5.4.0-1098.108.
- Update canonical linux-gcp-fips to version 5.4.0-1128.137+fips1.
- Update canonical linux to version 5.15.0-106.116.
- Update canonical linux-aws to version 5.15.0-1061.67.
- Update canonical linux-aws-6.5 to version 6.5.0-1020.20~22.04.1.
- Update canonical linux-azure to version 5.15.0-1063.72.
- Update canonical linux-azure-6.5 to version 6.5.0-1021.22~22.04.1.
- Update canonical linux-azure-fde to version 5.15.0-1063.72.1.
- Update canonical linux-gcp to version 5.15.0-1059.67.
- Update canonical linux-gcp-6.5 to version 6.5.0-1020.20~22.04.1.
- Update canonical linux-gke to version 5.15.0-1058.63.
- Update canonical linux-gkeop to version 5.15.0-1044.51.
- Update canonical linux-hwe-6.5 to version 6.5.0-35.35~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1054.57.
- Update canonical linux-intel-iotg to version 5.15.0-1057.63.
- Update canonical linux-kvm to version 5.15.0-1058.63.
- Update canonical linux-lowlatency to version 5.15.0-106.116.
- Update canonical linux-lowlatency-hwe-6.5 to version 6.5.0-35.35.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1054.55.
- Update canonical linux-nvidia-6.5 to version 6.5.0-1019.19.
- Update canonical linux-nvidia-tegra to version 5.15.0-1026.26.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1015.15.
- Update canonical linux-oem-6.5 to version 6.5.0-1023.24.
- Update canonical linux-oracle to version 5.15.0-1059.65.
- Update canonical linux-oracle-6.5 to version 6.5.0-1023.23~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1054.57.
- Update canonical linux-riscv-6.5 to version 6.5.0-35.35.1~22.04.1.
- Update canonical linux-starfive-6.5 to version 6.5.0-1014.15~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1030.34.
- Update canonical linux-bluefield to version 5.15.0-1043.45.
- Update canonical linux-aws-fips to version 5.15.0-1061.67+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1063.72+fips1.
- Update canonical linux-fips to version 5.15.0-106.116+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1059.67+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1054.56.
- Update canonical linux-realtime to version 5.15.0-1062.70.
- Update canonical linux-raspi-realtime to version 6.8.0-2001.1.
- Update linux kernel to version 6.7.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | linux |
< 6.1.76-1 Fix: upgrade to 6.1.76-1
|
| Debian:13 | debian | linux |
< 6.6.15-1 Fix: upgrade to 6.6.15-1
|
| Debian:14 | debian | linux |
< 6.6.15-1 Fix: upgrade to 6.6.15-1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws |
< 4.4.0-1131.137 Fix: upgrade to 4.4.0-1131.137
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1177.192~14.04.1 Fix: upgrade to 4.15.0-1177.192~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-254.288~14.04.1 Fix: upgrade to 4.4.0-254.288~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux |
< 4.4.0-254.288 Fix: upgrade to 4.4.0-254.288
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws |
< 4.4.0-1169.184 Fix: upgrade to 4.4.0-1169.184
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1168.181~16.04.1 Fix: upgrade to 4.15.0-1168.181~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1177.192~16.04.1 Fix: upgrade to 4.15.0-1177.192~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1162.179~16.04.1 Fix: upgrade to 4.15.0-1162.179~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-225.237~16.04.1 Fix: upgrade to 4.15.0-225.237~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1132.142 Fix: upgrade to 4.4.0-1132.142
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1131.142~16.04.1 Fix: upgrade to 4.15.0-1131.142~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1101.108 Fix: upgrade to 4.4.0-1101.108
|
| Ubuntu:Pro:18.04:LTS | canonical | linux |
< 4.15.0-225.237 Fix: upgrade to 4.15.0-225.237
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws |
< 4.15.0-1168.181 Fix: upgrade to 4.15.0-1168.181
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1124.134~18.04.1 Fix: upgrade to 5.4.0-1124.134~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1177.192 Fix: upgrade to 4.15.0-1177.192
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1129.136~18.04.1 Fix: upgrade to 5.4.0-1129.136~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1162.179 Fix: upgrade to 4.15.0-1162.179
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1128.137~18.04.1 Fix: upgrade to 5.4.0-1128.137~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-181.201~18.04.1 Fix: upgrade to 5.4.0-181.201~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1071.76~18.04.1 Fix: upgrade to 5.4.0-1071.76~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1152.157 Fix: upgrade to 4.15.0-1152.157
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1131.142 Fix: upgrade to 4.15.0-1131.142
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1123.132~18.04.1 Fix: upgrade to 5.4.0-1123.132~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1108.120~18.04.1 Fix: upgrade to 5.4.0-1108.120~18.04.1
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2107.113 Fix: upgrade to 4.15.0-2107.113
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2086.92 Fix: upgrade to 4.15.0-2086.92
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1123.134 Fix: upgrade to 4.15.0-1123.134
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2070.75 Fix: upgrade to 4.15.0-2070.75
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
Showing 50 of 165. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-181.201 Fix: upgrade to 5.4.0-181.201
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1124.134 Fix: upgrade to 5.4.0-1124.134
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1061.67~20.04.1 Fix: upgrade to 5.15.0-1061.67~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1129.136 Fix: upgrade to 5.4.0-1129.136
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1063.72~20.04.1 Fix: upgrade to 5.15.0-1063.72~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1084.91 Fix: upgrade to 5.4.0-1084.91
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1128.137 Fix: upgrade to 5.4.0-1128.137
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1059.67~20.04.1 Fix: upgrade to 5.15.0-1059.67~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1091.95 Fix: upgrade to 5.4.0-1091.95
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1044.51~20.04.1 Fix: upgrade to 5.15.0-1044.51~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-106.116~20.04.1 Fix: upgrade to 5.15.0-106.116~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1071.76 Fix: upgrade to 5.4.0-1071.76
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1054.57~20.04.1 Fix: upgrade to 5.15.0-1054.57~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1058.64~20.04.1 Fix: upgrade to 5.15.0-1058.64~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1036.37 Fix: upgrade to 5.4.0-1036.37
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1112.119 Fix: upgrade to 5.4.0-1112.119
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-106.116~20.04.1 Fix: upgrade to 5.15.0-106.116~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1027.27~20.04.1 Fix: upgrade to 5.15.0-1027.27~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1123.132 Fix: upgrade to 5.4.0-1123.132
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1059.65~20.04.1 Fix: upgrade to 5.15.0-1059.65~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1108.120 Fix: upgrade to 5.4.0-1108.120
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1057.61~20.04.1 Fix: upgrade to 5.15.0-1057.61~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1043.47 Fix: upgrade to 5.4.0-1043.47
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1124.134+fips1 Fix: upgrade to 5.4.0-1124.134+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1129.136+fips1 Fix: upgrade to 5.4.0-1129.136+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1098.108 Fix: upgrade to 5.4.0-1098.108
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1128.137+fips1 Fix: upgrade to 5.4.0-1128.137+fips1
|
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-106.116 Fix: upgrade to 5.15.0-106.116
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1061.67 Fix: upgrade to 5.15.0-1061.67
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 |
< 6.5.0-1020.20~22.04.1 Fix: upgrade to 6.5.0-1020.20~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1063.72 Fix: upgrade to 5.15.0-1063.72
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 |
< 6.5.0-1021.22~22.04.1 Fix: upgrade to 6.5.0-1021.22~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1063.72.1 Fix: upgrade to 5.15.0-1063.72.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1059.67 Fix: upgrade to 5.15.0-1059.67
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 |
< 6.5.0-1020.20~22.04.1 Fix: upgrade to 6.5.0-1020.20~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1058.63 Fix: upgrade to 5.15.0-1058.63
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1044.51 Fix: upgrade to 5.15.0-1044.51
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 |
< 6.5.0-35.35~22.04.1 Fix: upgrade to 6.5.0-35.35~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1054.57 Fix: upgrade to 5.15.0-1054.57
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1057.63 Fix: upgrade to 5.15.0-1057.63
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1058.63 Fix: upgrade to 5.15.0-1058.63
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-106.116 Fix: upgrade to 5.15.0-106.116
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 |
< 6.5.0-35.35.1~22.04.1 Fix: upgrade to 6.5.0-35.35.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1054.55 Fix: upgrade to 5.15.0-1054.55
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 |
< 6.5.0-1019.19 Fix: upgrade to 6.5.0-1019.19
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1026.26 Fix: upgrade to 5.15.0-1026.26
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1015.15 Fix: upgrade to 5.15.0-1015.15
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 |
< 6.5.0-1023.24 Fix: upgrade to 6.5.0-1023.24
|
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1059.65 Fix: upgrade to 5.15.0-1059.65
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 |
< 6.5.0-1023.23~22.04.1 Fix: upgrade to 6.5.0-1023.23~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1054.57 Fix: upgrade to 5.15.0-1054.57
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 |
< 6.5.0-35.35.1~22.04.1 Fix: upgrade to 6.5.0-35.35.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 |
< 6.5.0-1014.15~22.04.1 Fix: upgrade to 6.5.0-1014.15~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1030.34 Fix: upgrade to 5.15.0-1030.34
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1043.45 Fix: upgrade to 5.15.0-1043.45
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1061.67+fips1 Fix: upgrade to 5.15.0-1061.67+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1063.72+fips1 Fix: upgrade to 5.15.0-1063.72+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-106.116+fips1 Fix: upgrade to 5.15.0-106.116+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1059.67+fips1 Fix: upgrade to 5.15.0-1059.67+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1054.56 Fix: upgrade to 5.15.0-1054.56
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1062.70 Fix: upgrade to 5.15.0-1062.70
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2001.1 Fix: upgrade to 6.8.0-2001.1
|
| – | linux | linux_kernel |
>= 3.5, < 4.19.307 >= 4.20, < 5.4.269 >= 5.5, < 5.10.210 >= 5.11, < 5.15.149 >= 5.16, < 6.1.76 >= 6.2, < 6.6.15 >= 6.7, < 6.7.3 6.8 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | debian | debian_linux |
10.0 cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Linux | linux | kernel |
>= 6.7.0, < 6.7.3 Fix: upgrade to 6.7.3
|
Original advisory text
llc: Drop support for ETH_P_TR_802_2.
In the Linux kernel, the following vulnerability has been resolved: llc: Drop support for ETH_P_TR_802_2. syzbot reported an uninit-value bug below. [0] llc supports ETH_P_802_2 (0x0004) and used to support ETH_P_TR_802_2 (0x0011), and syzbot abused the latter to trigger the bug. write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x11}, @val, @mpls={[], @llc={@snap={0xaa, 0x1, ')', "90e5dd"}}}}, 0x16) llc_conn_handler() initialises local variables {saddr,daddr}.mac based on skb in llc_pdu_decode_sa()/llc_pdu_decode_da() and passes them to __llc_lookup(). However, the initialisation is done only when skb->protocol is htons(ETH_P_802_2), otherwise, __llc_lookup_established() and __llc_lookup_listener() will read garbage. The missing initialisation existed prior to commit 211ed865108e ("net: delete all instances of special processing for token ring"). It removed the part to kick out the token ring stuff but forgot to close the door allowing ETH_P_TR_802_2 packets to sneak into llc_rcv(). Let's remove llc_tr_packet_type and complete the deprecation. [0]: BUG: KMSAN: uninit-value in __llc_lookup_established+0xe9d/0xf90 __llc_lookup_established+0xe9d/0xf90 __llc_lookup net/llc/llc_conn.c:611 [inline] llc_conn_handler+0x4bd/0x1360 net/llc/llc_conn.c:791 llc_rcv+0xfbb/0x14a0 net/llc/llc_input.c:206 __netif_receive_skb_one_core net/core/dev.c:5527 [inline] __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5641 netif_receive_skb_internal net/core/dev.c:5727 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5786 tun_rx_batched+0x3ee/0x980 drivers/net/tun.c:1555 tun_get_user+0x53af/0x66d0 drivers/net/tun.c:2002 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:2020 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x1490 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x44/0x110 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x63/0x6b Local variable daddr created at: llc_conn_handler+0x53/0x1360 net/llc/llc_conn.c:783 llc_rcv+0xfbb/0x14a0 net/llc/llc_input.c:206 CPU: 1 PID: 5004 Comm: syz-executor994 Not tainted 6.6.0-syzkaller-14500-g1c41041124bd #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
References
- https://security-tracker.debian.org/tracker/CVE-2024-26635 Vendor Advisory
- https://ubuntu.com/security/CVE-2024-26635 Third Party Advisory
- https://git.kernel.org/linus/e3f9bed9bee261e3347131764e42aeedf1ffea61 Third Party Advisory
- https://ubuntu.com/security/notices/USN-6778-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6766-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6777-2 Vendor Advisory
- https://git.kernel.org/stable/c/165ad1e22779685c3ed3dd349c6c4c632309cc62 Third Party Advisory
- https://git.kernel.org/stable/c/b8e8838f82f332ae80c643dbb1ca4418d0628097 Third Party Advisory
- https://git.kernel.org/stable/c/9ccdef19cf9497c2803b005369668feb91cacdfd Third Party Advisory
- https://git.kernel.org/stable/c/f1f34a515fb1e25e85dee94f781e7869ae351fb8 Third Party Advisory
- https://git.kernel.org/stable/c/e3f9bed9bee261e3347131764e42aeedf1ffea61 Third Party Advisory
- https://git.kernel.org/stable/c/c0fe2fe7a5a291dfcf6dc64301732c8d3dc6a828 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html URL
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26635... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-26635 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/660c3053d992b68fee893a0e9ec9159228cffdc6 Third Party Advisory
- https://git.kernel.org/stable/c/df57fc2f2abf548aa889a36ab0bdcc94a75399dc Third Party Advisory
- https://ubuntu.com/security/notices/USN-6777-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6777-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6795-1 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-26635 Third Party Advisory
- https://ubuntu.com/security/notices/USN-6766-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6767-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6767-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6766-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6774-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6777-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6828-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
6.0
Medium
Type
CWE-909Missing Initialization of Resource
Timeline
Published18 Mar 2024
Updated4 Nov 2026
First seen1 Sep 2026
Sources
DEBIAN-CVE-2024-26635 · OSV
CVE-2024-26635 · NVD
UBUNTU-CVE-2024-26635 · OSV
CVE-2024-26635 · OSV
Track software like this
Free during beta