{"id":"USN-7006-1","summary":"linux-iot vulnerabilities","details":"\nIt was discovered that a race condition existed in the Bluetooth subsystem\nin the Linux kernel, leading to a null pointer dereference vulnerability. A\nprivileged local attacker could use this to possibly cause a denial of\nservice (system crash). (CVE-2024-24860)\n\nIt was discovered that the JFS file system contained an out-of-bounds read\nvulnerability when printing xattr debug information. A local attacker could\nuse this to cause a denial of service (system crash). (CVE-2024-40902)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - MIPS architecture;\n  - PowerPC architecture;\n  - SuperH RISC architecture;\n  - x86 architecture;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - GPIO subsystem;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - I2C subsystem;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Media drivers;\n  - VMware VMCI Driver;\n  - MMC subsystem;\n  - Network drivers;\n  - Pin controllers subsystem;\n  - S/390 drivers;\n  - SCSI drivers;\n  - USB subsystem;\n  - GFS2 file system;\n  - JFFS2 file system;\n  - JFS file system;\n  - File systems infrastructure;\n  - NILFS2 file system;\n  - IOMMU subsystem;\n  - Sun RPC protocol;\n  - Netfilter;\n  - Memory management;\n  - B.A.T.M.A.N. meshing protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - Networking core;\n  - IPv4 networking;\n  - IPv6 networking;\n  - IUCV driver;\n  - MAC80211 subsystem;\n  - NET/ROM layer;\n  - Network traffic control;\n  - HD-audio driver;\n  - SoC Audio for Freescale CPUs drivers;\n(CVE-2024-42154, CVE-2024-42093, CVE-2024-42096, CVE-2024-40984,\nCVE-2024-39502, CVE-2024-36901, CVE-2024-41044, CVE-2024-40961,\nCVE-2024-40981, CVE-2024-42236, CVE-2024-42232, CVE-2024-41041,\nCVE-2024-40958, CVE-2024-40905, CVE-2024-42084, CVE-2024-40934,\nCVE-2024-42124, CVE-2024-39505, CVE-2024-39506, CVE-2024-39501,\nCVE-2021-46926, CVE-2024-40941, CVE-2024-42145, CVE-2024-41089,\nCVE-2024-40932, CVE-2024-42224, CVE-2024-41097, CVE-2024-40959,\nCVE-2024-42157, CVE-2024-39469, CVE-2024-39499, CVE-2024-40974,\nCVE-2024-42094, CVE-2024-36894, CVE-2024-42087, CVE-2024-42104,\nCVE-2023-52803, CVE-2024-41034, CVE-2024-40995, CVE-2023-52629,\nCVE-2024-40912, CVE-2024-39484, CVE-2024-41006, CVE-2023-52760,\nCVE-2024-41095, CVE-2024-41046, CVE-2024-42070, CVE-2023-52887,\nCVE-2024-40960, CVE-2024-41007, CVE-2024-40901, CVE-2024-42119,\nCVE-2024-40987, CVE-2024-42148, CVE-2024-41049, CVE-2024-40963,\nCVE-2024-41087, CVE-2024-42223, CVE-2024-42090, CVE-2024-42105,\nCVE-2024-42089, CVE-2024-40916, CVE-2024-40942, CVE-2024-40978,\nCVE-2024-40902, CVE-2024-26921, CVE-2024-39495, CVE-2024-40943,\nCVE-2024-36978, CVE-2024-26929, CVE-2024-40988, CVE-2024-39503,\nCVE-2024-42101, CVE-2024-40904, CVE-2024-42086, CVE-2024-42106,\nCVE-2024-26830, CVE-2024-41035, CVE-2024-42153, CVE-2024-39509,\nCVE-2024-37078, CVE-2024-42076, CVE-2024-36974, CVE-2024-40980,\nCVE-2024-40945, CVE-2024-39487, CVE-2024-42092, CVE-2024-38619,\nCVE-2024-42127, CVE-2024-40968, CVE-2024-42115, CVE-2024-42102,\nCVE-2024-42097)\n","modified":"2026-05-23T01:47:46.232338302Z","published":"2024-09-12T14:07:21Z","related":["UBUNTU-CVE-2021-46926","UBUNTU-CVE-2023-52629","UBUNTU-CVE-2023-52760","UBUNTU-CVE-2023-52803","UBUNTU-CVE-2023-52887","UBUNTU-CVE-2024-24860","UBUNTU-CVE-2024-26830","UBUNTU-CVE-2024-26921","UBUNTU-CVE-2024-26929","UBUNTU-CVE-2024-36894","UBUNTU-CVE-2024-36901","UBUNTU-CVE-2024-36974","UBUNTU-CVE-2024-36978","UBUNTU-CVE-2024-37078","UBUNTU-CVE-2024-38619","UBUNTU-CVE-2024-39469","UBUNTU-CVE-2024-39484","UBUNTU-CVE-2024-39487","UBUNTU-CVE-2024-39495","UBUNTU-CVE-2024-39499","UBUNTU-CVE-2024-39501","UBUNTU-CVE-2024-39502","UBUNTU-CVE-2024-39503","UBUNTU-CVE-2024-39505","UBUNTU-CVE-2024-39506","UBUNTU-CVE-2024-39509","UBUNTU-CVE-2024-40901","UBUNTU-CVE-2024-40902","UBUNTU-CVE-2024-40904","UBUNTU-CVE-2024-40905","UBUNTU-CVE-2024-40912","UBUNTU-CVE-2024-40916","UBUNTU-CVE-2024-40932","UBUNTU-CVE-2024-40934","UBUNTU-CVE-2024-40941","UBUNTU-CVE-2024-40942","UBUNTU-CVE-2024-40943","UBUNTU-CVE-2024-40945","UBUNTU-CVE-2024-40958","UBUNTU-CVE-2024-40959","UBUNTU-CVE-2024-40960","UBUNTU-CVE-2024-40961","UBUNTU-CVE-2024-40963","UBUNTU-CVE-2024-40968","UBUNTU-CVE-2024-40974","UBUNTU-CVE-2024-40978","UBUNTU-CVE-2024-40980","UBUNTU-CVE-2024-40981","UBUNTU-CVE-2024-40984","UBUNTU-CVE-2024-40987","UBUNTU-CVE-2024-40988","UBUNTU-CVE-2024-40995","UBUNTU-CVE-2024-41006","UBUNTU-CVE-2024-41007","UBUNTU-CVE-2024-41034","UBUNTU-CVE-2024-41035","UBUNTU-CVE-2024-41041","UBUNTU-CVE-2024-41044","UBUNTU-CVE-2024-41046","UBUNTU-CVE-2024-41049","UBUNTU-CVE-2024-41087","UBUNTU-CVE-2024-41089","UBUNTU-CVE-2024-41095","UBUNTU-CVE-2024-41097","UBUNTU-CVE-2024-42070","UBUNTU-CVE-2024-42076","UBUNTU-CVE-2024-42084","UBUNTU-CVE-2024-42086","UBUNTU-CVE-2024-42087","UBUNTU-CVE-2024-42089","UBUNTU-CVE-2024-42090","UBUNTU-CVE-2024-42092","UBUNTU-CVE-2024-42093","UBUNTU-CVE-2024-42094","UBUNTU-CVE-2024-42096","UBUNTU-CVE-2024-42097","UBUNTU-CVE-2024-42101","UBUNTU-CVE-2024-42102","UBUNTU-CVE-2024-42104","UBUNTU-CVE-2024-42105","UBUNTU-CVE-2024-42106","UBUNTU-CVE-2024-42115","UBUNTU-CVE-2024-42119","UBUNTU-CVE-2024-42124","UBUNTU-CVE-2024-42127","UBUNTU-CVE-2024-42145","UBUNTU-CVE-2024-42148","UBUNTU-CVE-2024-42153","UBUNTU-CVE-2024-42154","UBUNTU-CVE-2024-42157","UBUNTU-CVE-2024-42223","UBUNTU-CVE-2024-42224","UBUNTU-CVE-2024-42232","UBUNTU-CVE-2024-42236"],"upstream":["CVE-2024-26929","CVE-2024-39501","CVE-2024-39503","CVE-2024-40934","CVE-2024-41049","UBUNTU-CVE-2024-26929","UBUNTU-CVE-2024-39501","UBUNTU-CVE-2024-39503","UBUNTU-CVE-2024-40934","UBUNTU-CVE-2024-41049"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-7006-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-26929"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-39501"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-39503"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-40934"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-41049"}],"affected":[{"package":{"name":"linux-iot","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/linux-iot?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1043.44"}]}],"versions":["5.4.0-1001.3","5.4.0-1004.6","5.4.0-1005.7","5.4.0-1006.8","5.4.0-1009.11","5.4.0-1010.12","5.4.0-1011.13","5.4.0-1012.14","5.4.0-1013.15","5.4.0-1014.16","5.4.0-1017.18","5.4.0-1018.19","5.4.0-1019.20","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1028.29","5.4.0-1029.30","5.4.0-1030.31","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1035.36","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1041.42","5.4.0-1042.43"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"5.4.0-1043.44","binary_name":"linux-buildinfo-5.4.0-1043-iot"},{"binary_version":"5.4.0-1043.44","binary_name":"linux-headers-5.4.0-1043-iot"},{"binary_version":"5.4.0-1043.44","binary_name":"linux-image-5.4.0-1043-iot"},{"binary_version":"5.4.0-1043.44","binary_name":"linux-image-unsigned-5.4.0-1043-iot"},{"binary_version":"5.4.0-1043.44","binary_name":"linux-iot-headers-5.4.0-1043"},{"binary_version":"5.4.0-1043.44","binary_name":"linux-iot-tools-5.4.0-1043"},{"binary_version":"5.4.0-1043.44","binary_name":"linux-iot-tools-common"},{"binary_version":"5.4.0-1043.44","binary_name":"linux-modules-5.4.0-1043-iot"},{"binary_version":"5.4.0-1043.44","binary_name":"linux-tools-5.4.0-1043-iot"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:20.04:LTS","cves":[{"severity":[{"type":"Ubuntu","score":"medium"}],"id":"CVE-2024-26929"},{"id":"CVE-2024-39501","severity":[{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2024-39503","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2024-40934","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2024-41049"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7006-1.json"}}],"schema_version":"1.7.5"}