Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2024-36913: Linux kernel lets regular user gain full control
CVE-2024-36913 · published 1 day ago
Summary
The Linux kernel packages listed for Ubuntu 22.04 and related distributions contain a flaw that could allow someone with limited access to elevate their rights to full system control. This can lead to unauthorized changes, data loss, or further attacks. Apply the latest security updates for the affected Linux packages as soon as possible.
What to do
- Update debian rootio-linux to version 6.1.159-1.root.io.75.
- Update canonical linux-aws-6.8 to version 6.8.0-1013.14~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1012.14~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1012.13~22.04.1.
- Update canonical linux-hwe-6.8 to version 6.8.0-40.40~22.04.3.
- Update canonical linux-ibm-6.8 to version 6.8.0-1010.10~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-40.40.1~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1011.11~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1010.10~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-40.40.1~22.04.1.
- Update canonical linux-realtime-6.8 to version 6.8.1-1006.6~22.04.1.
- Update canonical linux to version 6.8.0-40.40.
- Update canonical linux-aws to version 6.8.0-1013.14.
- Update canonical linux-azure to version 6.8.0-1012.14.
- Update canonical linux-gcp to version 6.8.0-1012.13.
- Update canonical linux-gke to version 6.8.0-1008.11.
- Update canonical linux-ibm to version 6.8.0-1010.10.
- Update canonical linux-lowlatency to version 6.8.0-40.40.1.
- Update canonical linux-nvidia to version 6.8.0-1011.11.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1011.11.1.
- Update canonical linux-oem-6.8 to version 6.8.0-1010.10.
- Update canonical linux-oracle to version 6.8.0-1010.10.
- Update canonical linux-raspi to version 6.8.0-1009.10.
- Update canonical linux-riscv to version 6.8.0-40.40.1.
- Update canonical linux-fips to version 6.8.0-78.78+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2008.8.
- Update canonical linux-realtime to version 6.8.1-1006.6.
- Update canonical rootio-linux to version 5.15.0-185.195.root.io.101.
- Update canonical rootio-linux to version 5.15.0-186.196.aikido.104.
- Update canonical rootio-linux to version 5.15.0-186.196.root.io.103.
- Update debian linux to version 6.1.147-1.
- Update debian linux to version 6.8.11-1.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update linux linux to version 7f2afcbfe4f6b6047b5f68db5067b7321e5be125 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.159-1.root.io.75 Fix: upgrade to 6.1.159-1.root.io.75
|
| – | linux | linux |
< 7f2afcbfe4f6b6047b5f68db5067b7321e5be125 5.16 |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
Showing 50 of 119. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1013.14~22.04.1 Fix: upgrade to 6.8.0-1013.14~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1012.14~22.04.1 Fix: upgrade to 6.8.0-1012.14~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1012.13~22.04.1 Fix: upgrade to 6.8.0-1012.13~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-40.40~22.04.3 Fix: upgrade to 6.8.0-40.40~22.04.3
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1010.10~22.04.1 Fix: upgrade to 6.8.0-1010.10~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-40.40.1~22.04.1 Fix: upgrade to 6.8.0-40.40.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1011.11~22.04.1 Fix: upgrade to 6.8.0-1011.11~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1010.10~22.04.1 Fix: upgrade to 6.8.0-1010.10~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-40.40.1~22.04.1 Fix: upgrade to 6.8.0-40.40.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1006.6~22.04.1 Fix: upgrade to 6.8.1-1006.6~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-40.40 Fix: upgrade to 6.8.0-40.40
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1013.14 Fix: upgrade to 6.8.0-1013.14
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1012.14 Fix: upgrade to 6.8.0-1012.14
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1012.13 Fix: upgrade to 6.8.0-1012.13
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1008.11 Fix: upgrade to 6.8.0-1008.11
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1010.10 Fix: upgrade to 6.8.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-40.40.1 Fix: upgrade to 6.8.0-40.40.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1011.11 Fix: upgrade to 6.8.0-1011.11
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1011.11.1 Fix: upgrade to 6.8.0-1011.11.1
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 |
< 6.8.0-1010.10 Fix: upgrade to 6.8.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1010.10 Fix: upgrade to 6.8.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1009.10 Fix: upgrade to 6.8.0-1009.10
|
| Ubuntu:24.04:LTS | canonical | linux-riscv |
< 6.8.0-40.40.1 Fix: upgrade to 6.8.0-40.40.1
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-78.78+fips1 Fix: upgrade to 6.8.0-78.78+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2008.8 Fix: upgrade to 6.8.0-2008.8
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1006.6 Fix: upgrade to 6.8.1-1006.6
|
| Root:Ubuntu:22.04 | canonical | rootio-linux |
< 5.15.0-185.195.root.io.101 < 5.15.0-186.196.aikido.104 < 5.15.0-186.196.root.io.103 Fix: upgrade to 5.15.0-185.195.root.io.101
|
| Debian:12 | debian | linux |
< 6.1.147-1 Fix: upgrade to 6.1.147-1
|
| Debian:13 | debian | linux |
< 6.8.11-1 Fix: upgrade to 6.8.11-1
|
| – | debian | debian_linux |
11.0 cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| – | linux | linux_kernel |
>= 5.16, < 6.1.143 >= 6.2, < 6.6.31 >= 6.7, < 6.8.10 6.9 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 Fix: upgrade to 5.15.0-198.208.aikido.116
|
Original advisory text
CVE-2024-36913 in linux - Patched by Root
Root has patched CVE-2024-36913 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.
References
- https://git.kernel.org/stable/c/7f2afcbfe4f6b6047b5f68db5067b7321e5be125 Patch
- https://ubuntu.com/security/CVE-2024-36913 Third Party Advisory
- https://git.kernel.org/stable/c/e813a0fc2e597146e9cebea61ced9c796d4e308f Third Party Advisory
- https://git.kernel.org/linus/03f5a999adba062456c8c818a683beb1b498983a Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-36913 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2024-36913 Vendor Advisory
- https://git.kernel.org/stable/c/6123a4e8e25bd40cf44db14694abac00e6b664e6 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Mailing List Third Party Advisory
- https://git.kernel.org/stable/c/03f5a999adba062456c8c818a683beb1b498983a Third Party Advisory
- https://ubuntu.com/security/notices/USN-6949-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6952-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6955-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6949-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6952-2 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-1258Exposure of Sensitive System Information Due to Uncleared Debug Information
Timeline
Published9 Oct 2026
Updated9 Oct 2026
First seen6 Mar 2026
Sources
UBUNTU-CVE-2024-36913 · OSV
CVE-2024-36913 · NVD
CVE-2024-36913 · MITRE
DEBIAN-CVE-2024-36913 · OSV
Track software like this
Free during beta