Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux 6.8 kernels could let attackers tamper with network traffic
published 2 years ago
Summary
The Linux core used in several Ubuntu builds for cloud services and special hardware (such as AWS, GCP, high‑performance and Nvidia versions) contains a flaw in the part that controls network traffic. An attacker who exploits this could interfere with or take over network communication on the server. Install the latest kernel updates from Ubuntu’s official repositories and restart the system to apply the fix.
What to do
- Update canonical linux-aws-6.8 to version 6.8.0-1017.18~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1016.18~22.04.1.
- Update canonical linux-hwe-6.8 to version 6.8.0-47.47~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-47.47.1~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1015.16~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1014.14~22.04.1.
- Update canonical linux to version 6.8.0-47.47.
- Update canonical linux-aws to version 6.8.0-1017.18.
- Update canonical linux-gcp to version 6.8.0-1016.18.
- Update canonical linux-ibm to version 6.8.0-1014.14.
- Update canonical linux-lowlatency to version 6.8.0-47.47.1.
- Update canonical linux-nvidia to version 6.8.0-1015.16.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1015.16.1.
- Update canonical linux-oem-6.8 to version 6.8.0-1014.14.
- Update canonical linux-oracle to version 6.8.0-1014.14.
- Update canonical linux-raspi to version 6.8.0-1013.14.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1017.18~22.04.1 Fix: upgrade to 6.8.0-1017.18~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1016.18~22.04.1 Fix: upgrade to 6.8.0-1016.18~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-47.47~22.04.1 Fix: upgrade to 6.8.0-47.47~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-47.47.1~22.04.1 Fix: upgrade to 6.8.0-47.47.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1015.16~22.04.1 Fix: upgrade to 6.8.0-1015.16~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1014.14~22.04.1 Fix: upgrade to 6.8.0-1014.14~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-47.47 Fix: upgrade to 6.8.0-47.47
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1017.18 Fix: upgrade to 6.8.0-1017.18
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1016.18 Fix: upgrade to 6.8.0-1016.18
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1014.14 Fix: upgrade to 6.8.0-1014.14
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-47.47.1 Fix: upgrade to 6.8.0-47.47.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1015.16 Fix: upgrade to 6.8.0-1015.16
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1015.16.1 Fix: upgrade to 6.8.0-1015.16.1
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 |
< 6.8.0-1014.14 Fix: upgrade to 6.8.0-1014.14
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1014.14 Fix: upgrade to 6.8.0-1014.14
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1013.14 Fix: upgrade to 6.8.0-1013.14
|
Original advisory text
linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-hwe-6.8, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-oracle-6.8, linux-raspi vulnerability
A security issue was discovered in the Linux kernel.
An attacker could possibly use this to compromise the system.
This update corrects flaws in the following subsystems:
- Network traffic control;
(CVE-2024-45016)
References
- https://ubuntu.com/security/notices/USN-7071-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2024-45016 Third Party Advisory
Timeline
Published16 Oct 2024
Updated29 Oct 2026
First seen29 Oct 2026
Sources
USN-7071-1 · OSV
Track software like this
Free during beta