Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
linux-gcp could crash from Wi‑Fi driver removal
published 2 years ago
Summary
The Linux kernel used in the linux-gcp package has a flaw in its Broadcom Wi‑Fi driver that can cause the system to stop working if a nearby attacker triggers it. Updating the package fixes this and several other kernel components, reducing the risk of crashes and other attacks. Apply the latest linux-gcp update as soon as possible.
What to do
- Update canonical linux-gcp to version 4.15.0-1162.179~16.04.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1162.179~16.04.1 Fix: upgrade to 4.15.0-1162.179~16.04.1
|
Original advisory text
linux-gcp vulnerabilities
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Block layer subsystem;
- Userspace I/O drivers;
- Ceph distributed file system;
- Ext4 file system;
- JFS file system;
- NILFS2 file system;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Logical Link layer;
- MAC80211 subsystem;
- Netlink;
- NFC subsystem;
- Tomoyo security module;
(CVE-2023-52524, CVE-2023-52530, CVE-2023-52601, CVE-2023-52439,
CVE-2024-26635, CVE-2023-52602, CVE-2024-26614, CVE-2024-26704,
CVE-2023-52604, CVE-2023-52566, CVE-2021-46981, CVE-2024-26622,
CVE-2024-26735, CVE-2024-26805, CVE-2024-26801, CVE-2023-52583)
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Block layer subsystem;
- Userspace I/O drivers;
- Ceph distributed file system;
- Ext4 file system;
- JFS file system;
- NILFS2 file system;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Logical Link layer;
- MAC80211 subsystem;
- Netlink;
- NFC subsystem;
- Tomoyo security module;
(CVE-2023-52524, CVE-2023-52530, CVE-2023-52601, CVE-2023-52439,
CVE-2024-26635, CVE-2023-52602, CVE-2024-26614, CVE-2024-26704,
CVE-2023-52604, CVE-2023-52566, CVE-2021-46981, CVE-2024-26622,
CVE-2024-26735, CVE-2024-26805, CVE-2024-26801, CVE-2023-52583)
References
- https://ubuntu.com/security/notices/USN-6777-3 Vendor Advisory
- https://ubuntu.com/security/CVE-2021-46981 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-47233 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52439 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52524 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52530 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52566 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52583 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52601 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52602 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52604 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-26614 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-26622 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-26635 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-26704 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-26735 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-26801 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-26805 Third Party Advisory
Timeline
Published21 May 2024
Updated22 Oct 2026
First seen22 Oct 2026
Sources
USN-6777-3 · OSV
Track software like this
Free during beta