{"id":"USN-7007-2","summary":"linux-ibm-5.15, linux-oracle-5.15 vulnerabilities","details":"\nChenyuan Yang discovered that the CEC driver driver in the Linux kernel\ncontained a use-after-free vulnerability. A local attacker could use this\nto cause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2024-23848)\n\nChenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel\ndid not properly check for the device to be enabled before writing. A local\nattacker could possibly use this to cause a denial of service.\n(CVE-2024-25741)\n\nIt was discovered that the JFS file system contained an out-of-bounds read\nvulnerability when printing xattr debug information. A local attacker could\nuse this to cause a denial of service (system crash). (CVE-2024-40902)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM64 architecture;\n  - M68K architecture;\n  - MIPS architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Accessibility subsystem;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - Bluetooth drivers;\n  - Character device driver;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - Buffer Sharing and Synchronization framework;\n  - DMA engine subsystem;\n  - FPGA Framework;\n  - GPIO subsystem;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - HW tracing;\n  - I2C subsystem;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device (Mouse) drivers;\n  - Macintosh device drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - VMware VMCI Driver;\n  - Network drivers;\n  - Near Field Communication (NFC) drivers;\n  - NVME drivers;\n  - Pin controllers subsystem;\n  - PTP clock framework;\n  - S/390 drivers;\n  - SCSI drivers;\n  - SoundWire subsystem;\n  - Greybus lights staging drivers;\n  - Media staging drivers;\n  - Thermal drivers;\n  - TTY drivers;\n  - USB subsystem;\n  - DesignWare USB3 driver;\n  - Framebuffer layer;\n  - ACRN Hypervisor Service Module driver;\n  - eCrypt file system;\n  - File systems infrastructure;\n  - Ext4 file system;\n  - F2FS file system;\n  - JFFS2 file system;\n  - JFS file system;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - SMB network file system;\n  - IOMMU subsystem;\n  - Memory management;\n  - Netfilter;\n  - BPF subsystem;\n  - Kernel debugger infrastructure;\n  - DMA mapping infrastructure;\n  - IRQ subsystem;\n  - Tracing infrastructure;\n  - 9P file system network protocol;\n  - B.A.T.M.A.N. meshing protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - Networking core;\n  - IPv4 networking;\n  - IPv6 networking;\n  - IUCV driver;\n  - MAC80211 subsystem;\n  - Multipath TCP;\n  - NET/ROM layer;\n  - NFC subsystem;\n  - Open vSwitch;\n  - Network traffic control;\n  - TIPC protocol;\n  - TLS protocol;\n  - Unix domain sockets;\n  - Wireless networking;\n  - XFRM subsystem;\n  - ALSA framework;\n  - SoC Audio for Freescale CPUs drivers;\n  - Kirkwood ASoC drivers;\n(CVE-2024-42140, CVE-2024-38580, CVE-2024-38555, CVE-2024-38591,\nCVE-2024-40942, CVE-2024-42130, CVE-2024-41095, CVE-2024-40994,\nCVE-2024-39469, CVE-2024-38610, CVE-2024-42097, CVE-2024-42137,\nCVE-2024-31076, CVE-2024-38552, CVE-2024-36489, CVE-2024-40983,\nCVE-2024-40908, CVE-2024-39493, CVE-2024-40970, CVE-2024-40901,\nCVE-2024-38567, CVE-2024-38599, CVE-2024-38605, CVE-2024-42119,\nCVE-2024-38590, CVE-2024-38558, CVE-2023-52884, CVE-2024-41000,\nCVE-2024-42101, CVE-2024-40943, CVE-2024-39507, CVE-2024-42115,\nCVE-2024-40968, CVE-2024-42095, CVE-2024-41034, CVE-2024-38618,\nCVE-2024-38633, CVE-2024-40904, CVE-2024-42070, CVE-2024-38583,\nCVE-2024-39471, CVE-2024-38578, CVE-2024-38637, CVE-2024-40987,\nCVE-2024-39506, CVE-2024-39482, CVE-2024-42124, CVE-2024-40981,\nCVE-2024-35927, CVE-2022-48772, CVE-2024-38588, CVE-2023-52887,\nCVE-2024-40941, CVE-2024-34027, CVE-2024-38627, CVE-2024-42106,\nCVE-2024-40927, CVE-2024-38559, CVE-2024-39499, CVE-2024-39505,\nCVE-2024-42120, CVE-2024-38615, CVE-2024-39467, CVE-2024-42232,\nCVE-2024-38589, CVE-2024-38621, CVE-2024-41002, CVE-2024-40934,\nCVE-2024-38582, CVE-2024-39480, CVE-2024-38571, CVE-2024-39301,\nCVE-2024-38612, CVE-2024-39495, CVE-2024-39276, CVE-2024-42096,\nCVE-2024-41041, CVE-2024-40912, CVE-2024-41089, CVE-2024-41093,\nCVE-2024-40931, CVE-2024-42092, CVE-2024-41047, CVE-2024-40956,\nCVE-2024-42229, CVE-2024-40914, CVE-2024-39490, CVE-2024-38548,\nCVE-2024-41044, CVE-2024-40967, CVE-2024-38596, CVE-2024-40902,\nCVE-2024-41055, CVE-2024-38601, CVE-2024-42153, CVE-2024-38623,\nCVE-2024-35247, CVE-2024-38635, CVE-2024-38662, CVE-2024-42086,\nCVE-2024-42102, CVE-2024-42154, CVE-2024-38587, CVE-2024-39466,\nCVE-2024-40911, CVE-2024-39503, CVE-2024-42090, CVE-2024-42087,\nCVE-2024-40929, CVE-2024-37078, CVE-2024-39489, CVE-2024-42244,\nCVE-2024-40980, CVE-2024-38624, CVE-2024-42105, CVE-2024-36270,\nCVE-2024-41092, CVE-2024-40937, CVE-2024-38780, CVE-2024-41035,\nCVE-2024-42104, CVE-2024-40988, CVE-2024-36894, CVE-2024-42157,\nCVE-2024-38613, CVE-2024-40916, CVE-2024-41040, CVE-2024-36032,\nCVE-2024-40978, CVE-2024-38579, CVE-2024-38550, CVE-2024-41049,\nCVE-2024-40959, CVE-2024-42131, CVE-2024-42161, CVE-2024-42247,\nCVE-2024-37356, CVE-2024-40905, CVE-2024-42098, CVE-2024-40932,\nCVE-2024-42236, CVE-2024-38565, CVE-2024-38661, CVE-2024-40963,\nCVE-2024-42240, CVE-2024-40984, CVE-2024-39277, CVE-2024-38573,\nCVE-2024-39509, CVE-2024-41006, CVE-2024-34777, CVE-2024-42152,\nCVE-2024-40954, CVE-2024-39501, CVE-2024-42109, CVE-2024-42080,\nCVE-2024-42225, CVE-2024-41007, CVE-2024-42077, CVE-2024-38634,\nCVE-2024-40995, CVE-2024-42084, CVE-2024-40974, CVE-2024-38586,\nCVE-2024-42224, CVE-2024-40960, CVE-2024-39500, CVE-2024-41004,\nCVE-2024-42145, CVE-2024-38619, CVE-2024-36974, CVE-2024-39502,\nCVE-2024-41097, CVE-2024-40958, CVE-2024-41027, CVE-2024-36972,\nCVE-2024-36286, CVE-2024-40990, CVE-2024-42082, CVE-2024-40945,\nCVE-2024-36014, CVE-2024-42068, CVE-2024-41087, CVE-2024-36978,\nCVE-2024-42148, CVE-2024-40971, CVE-2024-38546, CVE-2024-39488,\nCVE-2024-41048, CVE-2024-42121, CVE-2024-38381, CVE-2024-41046,\nCVE-2024-36971, CVE-2024-42085, CVE-2024-39487, CVE-2024-33847,\nCVE-2024-38607, CVE-2024-33621, CVE-2024-40957, CVE-2024-42127,\nCVE-2024-38547, CVE-2024-36015, CVE-2024-38549, CVE-2024-38597,\nCVE-2024-42093, CVE-2024-42089, CVE-2024-39468, CVE-2024-38560,\nCVE-2024-42223, CVE-2024-38659, CVE-2024-38598, CVE-2024-40976,\nCVE-2024-42094, CVE-2024-41005, CVE-2024-39475, CVE-2024-40961,\nCVE-2024-42076)\n","modified":"2026-04-24T10:02:20.300760414Z","published":"2024-09-23T09:59:41Z","related":["UBUNTU-CVE-2022-48772","UBUNTU-CVE-2023-52884","UBUNTU-CVE-2023-52887","UBUNTU-CVE-2024-23848","UBUNTU-CVE-2024-25741","UBUNTU-CVE-2024-31076","UBUNTU-CVE-2024-33621","UBUNTU-CVE-2024-33847","UBUNTU-CVE-2024-34027","UBUNTU-CVE-2024-34777","UBUNTU-CVE-2024-35247","UBUNTU-CVE-2024-35927","UBUNTU-CVE-2024-36014","UBUNTU-CVE-2024-36015","UBUNTU-CVE-2024-36032","UBUNTU-CVE-2024-36270","UBUNTU-CVE-2024-36286","UBUNTU-CVE-2024-36489","UBUNTU-CVE-2024-36894","UBUNTU-CVE-2024-36971","UBUNTU-CVE-2024-36972","UBUNTU-CVE-2024-36974","UBUNTU-CVE-2024-36978","UBUNTU-CVE-2024-37078","UBUNTU-CVE-2024-37356","UBUNTU-CVE-2024-38381","UBUNTU-CVE-2024-38546","UBUNTU-CVE-2024-38547","UBUNTU-CVE-2024-38548","UBUNTU-CVE-2024-38549","UBUNTU-CVE-2024-38550","UBUNTU-CVE-2024-38552","UBUNTU-CVE-2024-38555","UBUNTU-CVE-2024-38558","UBUNTU-CVE-2024-38559","UBUNTU-CVE-2024-38560","UBUNTU-CVE-2024-38565","UBUNTU-CVE-2024-38567","UBUNTU-CVE-2024-38571","UBUNTU-CVE-2024-38573","UBUNTU-CVE-2024-38578","UBUNTU-CVE-2024-38579","UBUNTU-CVE-2024-38580","UBUNTU-CVE-2024-38582","UBUNTU-CVE-2024-38583","UBUNTU-CVE-2024-38586","UBUNTU-CVE-2024-38587","UBUNTU-CVE-2024-38588","UBUNTU-CVE-2024-38589","UBUNTU-CVE-2024-38590","UBUNTU-CVE-2024-38591","UBUNTU-CVE-2024-38596","UBUNTU-CVE-2024-38597","UBUNTU-CVE-2024-38598","UBUNTU-CVE-2024-38599","UBUNTU-CVE-2024-38601","UBUNTU-CVE-2024-38605","UBUNTU-CVE-2024-38607","UBUNTU-CVE-2024-38610","UBUNTU-CVE-2024-38612","UBUNTU-CVE-2024-38613","UBUNTU-CVE-2024-38615","UBUNTU-CVE-2024-38618","UBUNTU-CVE-2024-38619","UBUNTU-CVE-2024-38621","UBUNTU-CVE-2024-38623","UBUNTU-CVE-2024-38624","UBUNTU-CVE-2024-38627","UBUNTU-CVE-2024-38633","UBUNTU-CVE-2024-38634","UBUNTU-CVE-2024-38635","UBUNTU-CVE-2024-38637","UBUNTU-CVE-2024-38659","UBUNTU-CVE-2024-38661","UBUNTU-CVE-2024-38662","UBUNTU-CVE-2024-38780","UBUNTU-CVE-2024-39276","UBUNTU-CVE-2024-39277","UBUNTU-CVE-2024-39301","UBUNTU-CVE-2024-39466","UBUNTU-CVE-2024-39467","UBUNTU-CVE-2024-39468","UBUNTU-CVE-2024-39469","UBUNTU-CVE-2024-39471","UBUNTU-CVE-2024-39475","UBUNTU-CVE-2024-39480","UBUNTU-CVE-2024-39482","UBUNTU-CVE-2024-39487","UBUNTU-CVE-2024-39488","UBUNTU-CVE-2024-39489","UBUNTU-CVE-2024-39490","UBUNTU-CVE-2024-39493","UBUNTU-CVE-2024-39495","UBUNTU-CVE-2024-39499","UBUNTU-CVE-2024-39500","UBUNTU-CVE-2024-39501","UBUNTU-CVE-2024-39502","UBUNTU-CVE-2024-39503","UBUNTU-CVE-2024-39505","UBUNTU-CVE-2024-39506","UBUNTU-CVE-2024-39507","UBUNTU-CVE-2024-39509","UBUNTU-CVE-2024-40901","UBUNTU-CVE-2024-40902","UBUNTU-CVE-2024-40904","UBUNTU-CVE-2024-40905","UBUNTU-CVE-2024-40908","UBUNTU-CVE-2024-40911","UBUNTU-CVE-2024-40912","UBUNTU-CVE-2024-40914","UBUNTU-CVE-2024-40916","UBUNTU-CVE-2024-40927","UBUNTU-CVE-2024-40929","UBUNTU-CVE-2024-40931","UBUNTU-CVE-2024-40932","UBUNTU-CVE-2024-40934","UBUNTU-CVE-2024-40937","UBUNTU-CVE-2024-40941","UBUNTU-CVE-2024-40942","UBUNTU-CVE-2024-40943","UBUNTU-CVE-2024-40945","UBUNTU-CVE-2024-40954","UBUNTU-CVE-2024-40956","UBUNTU-CVE-2024-40957","UBUNTU-CVE-2024-40958","UBUNTU-CVE-2024-40959","UBUNTU-CVE-2024-40960","UBUNTU-CVE-2024-40961","UBUNTU-CVE-2024-40963","UBUNTU-CVE-2024-40967","UBUNTU-CVE-2024-40968","UBUNTU-CVE-2024-40970","UBUNTU-CVE-2024-40971","UBUNTU-CVE-2024-40974","UBUNTU-CVE-2024-40976","UBUNTU-CVE-2024-40978","UBUNTU-CVE-2024-40980","UBUNTU-CVE-2024-40981","UBUNTU-CVE-2024-40983","UBUNTU-CVE-2024-40984","UBUNTU-CVE-2024-40987","UBUNTU-CVE-2024-40988","UBUNTU-CVE-2024-40990","UBUNTU-CVE-2024-40994","UBUNTU-CVE-2024-40995","UBUNTU-CVE-2024-41000","UBUNTU-CVE-2024-41002","UBUNTU-CVE-2024-41004","UBUNTU-CVE-2024-41005","UBUNTU-CVE-2024-41006","UBUNTU-CVE-2024-41007","UBUNTU-CVE-2024-41027","UBUNTU-CVE-2024-41034","UBUNTU-CVE-2024-41035","UBUNTU-CVE-2024-41040","UBUNTU-CVE-2024-41041","UBUNTU-CVE-2024-41044","UBUNTU-CVE-2024-41046","UBUNTU-CVE-2024-41047","UBUNTU-CVE-2024-41048","UBUNTU-CVE-2024-41049","UBUNTU-CVE-2024-41055","UBUNTU-CVE-2024-41087","UBUNTU-CVE-2024-41089","UBUNTU-CVE-2024-41092","UBUNTU-CVE-2024-41093","UBUNTU-CVE-2024-41095","UBUNTU-CVE-2024-41097","UBUNTU-CVE-2024-42068","UBUNTU-CVE-2024-42070","UBUNTU-CVE-2024-42076","UBUNTU-CVE-2024-42077","UBUNTU-CVE-2024-42080","UBUNTU-CVE-2024-42082","UBUNTU-CVE-2024-42084","UBUNTU-CVE-2024-42085","UBUNTU-CVE-2024-42086","UBUNTU-CVE-2024-42087","UBUNTU-CVE-2024-42089","UBUNTU-CVE-2024-42090","UBUNTU-CVE-2024-42092","UBUNTU-CVE-2024-42093","UBUNTU-CVE-2024-42094","UBUNTU-CVE-2024-42095","UBUNTU-CVE-2024-42096","UBUNTU-CVE-2024-42097","UBUNTU-CVE-2024-42098","UBUNTU-CVE-2024-42101","UBUNTU-CVE-2024-42102","UBUNTU-CVE-2024-42104","UBUNTU-CVE-2024-42105","UBUNTU-CVE-2024-42106","UBUNTU-CVE-2024-42109","UBUNTU-CVE-2024-42115","UBUNTU-CVE-2024-42119","UBUNTU-CVE-2024-42120","UBUNTU-CVE-2024-42121","UBUNTU-CVE-2024-42124","UBUNTU-CVE-2024-42127","UBUNTU-CVE-2024-42130","UBUNTU-CVE-2024-42131","UBUNTU-CVE-2024-42137","UBUNTU-CVE-2024-42140","UBUNTU-CVE-2024-42145","UBUNTU-CVE-2024-42148","UBUNTU-CVE-2024-42152","UBUNTU-CVE-2024-42153","UBUNTU-CVE-2024-42154","UBUNTU-CVE-2024-42157","UBUNTU-CVE-2024-42161","UBUNTU-CVE-2024-42223","UBUNTU-CVE-2024-42224","UBUNTU-CVE-2024-42225","UBUNTU-CVE-2024-42229","UBUNTU-CVE-2024-42232","UBUNTU-CVE-2024-42236","UBUNTU-CVE-2024-42240","UBUNTU-CVE-2024-42244","UBUNTU-CVE-2024-42247"],"upstream":["CVE-2024-36972","CVE-2024-38381","CVE-2024-38587","CVE-2024-39475","CVE-2024-39482","CVE-2024-39493","CVE-2024-39501","CVE-2024-39503","CVE-2024-40934","CVE-2024-41049","CVE-2024-41055","CVE-2024-42130","UBUNTU-CVE-2024-36972","UBUNTU-CVE-2024-38381","UBUNTU-CVE-2024-38587","UBUNTU-CVE-2024-39475","UBUNTU-CVE-2024-39482","UBUNTU-CVE-2024-39493","UBUNTU-CVE-2024-39501","UBUNTU-CVE-2024-39503","UBUNTU-CVE-2024-40934","UBUNTU-CVE-2024-41049","UBUNTU-CVE-2024-41055","UBUNTU-CVE-2024-42130"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-7007-2"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-36972"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-38381"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-38587"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-39475"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-39482"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-39493"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-39501"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-39503"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-40934"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-41049"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-41055"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-42130"}],"affected":[{"package":{"name":"linux-ibm-5.15","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/linux-ibm-5.15@5.15.0-1062.65~20.04.1?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1062.65~20.04.1"}]}],"versions":["5.15.0-1033.36~20.04.1","5.15.0-1034.37~20.04.1","5.15.0-1035.38~20.04.1","5.15.0-1036.39~20.04.1","5.15.0-1037.40~20.04.1","5.15.0-1038.41~20.04.1","5.15.0-1040.43~20.04.1","5.15.0-1041.44~20.04.1","5.15.0-1042.45~20.04.1","5.15.0-1043.46~20.04.1","5.15.0-1044.47~20.04.1","5.15.0-1045.48~20.04.1","5.15.0-1046.49~20.04.1","5.15.0-1047.50~20.04.1","5.15.0-1048.51~20.04.1","5.15.0-1049.52~20.04.1","5.15.0-1050.53~20.04.1","5.15.0-1053.56~20.04.1","5.15.0-1054.57~20.04.1","5.15.0-1055.58~20.04.1","5.15.0-1057.60~20.04.1","5.15.0-1058.61~20.04.1","5.15.0-1059.62~20.04.1","5.15.0-1060.63~20.04.1","5.15.0-1061.64~20.04.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-buildinfo-5.15.0-1062-ibm","binary_version":"5.15.0-1062.65~20.04.1"},{"binary_name":"linux-headers-5.15.0-1062-ibm","binary_version":"5.15.0-1062.65~20.04.1"},{"binary_name":"linux-ibm-5.15-headers-5.15.0-1062","binary_version":"5.15.0-1062.65~20.04.1"},{"binary_name":"linux-ibm-5.15-source-5.15.0","binary_version":"5.15.0-1062.65~20.04.1"},{"binary_name":"linux-ibm-5.15-tools-5.15.0-1062","binary_version":"5.15.0-1062.65~20.04.1"},{"binary_name":"linux-image-unsigned-5.15.0-1062-ibm","binary_version":"5.15.0-1062.65~20.04.1"},{"binary_name":"linux-modules-5.15.0-1062-ibm","binary_version":"5.15.0-1062.65~20.04.1"},{"binary_name":"linux-modules-extra-5.15.0-1062-ibm","binary_version":"5.15.0-1062.65~20.04.1"},{"binary_name":"linux-tools-5.15.0-1062-ibm","binary_version":"5.15.0-1062.65~20.04.1"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2024-36972","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}]},{"id":"CVE-2024-38381","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-38587","severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-39475","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-39493","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-39501","severity":[{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-39503","severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-40934","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-41049","severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-41055","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-42130","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:20.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7007-2.json"}},{"package":{"name":"linux-oracle-5.15","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/linux-oracle-5.15@5.15.0-1067.73~20.04.1?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1067.73~20.04.1"}]}],"versions":["5.15.0-1007.9~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1016.20~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1021.27~20.04.1","5.15.0-1022.28~20.04.1","5.15.0-1025.31~20.04.2","5.15.0-1027.33~20.04.1","5.15.0-1029.35~20.04.1","5.15.0-1030.36~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1041.47~20.04.1","5.15.0-1042.48~20.04.1","5.15.0-1044.50~20.04.1","5.15.0-1045.51~20.04.1","5.15.0-1046.52~20.04.1","5.15.0-1047.53~20.04.1","5.15.0-1048.54~20.04.1","5.15.0-1049.55~20.04.1","5.15.0-1050.56~20.04.1","5.15.0-1051.57~20.04.1","5.15.0-1052.58~20.04.1","5.15.0-1053.59~20.04.1","5.15.0-1054.60~20.04.1","5.15.0-1055.61~20.04.1","5.15.0-1058.64~20.04.1","5.15.0-1059.65~20.04.1","5.15.0-1061.67~20.04.1","5.15.0-1062.68~20.04.1","5.15.0-1063.69~20.04.1","5.15.0-1065.71~20.04.1","5.15.0-1066.72~20.04.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-buildinfo-5.15.0-1067-oracle","binary_version":"5.15.0-1067.73~20.04.1"},{"binary_name":"linux-headers-5.15.0-1067-oracle","binary_version":"5.15.0-1067.73~20.04.1"},{"binary_name":"linux-image-unsigned-5.15.0-1067-oracle","binary_version":"5.15.0-1067.73~20.04.1"},{"binary_name":"linux-modules-5.15.0-1067-oracle","binary_version":"5.15.0-1067.73~20.04.1"},{"binary_name":"linux-modules-extra-5.15.0-1067-oracle","binary_version":"5.15.0-1067.73~20.04.1"},{"binary_name":"linux-oracle-5.15-headers-5.15.0-1067","binary_version":"5.15.0-1067.73~20.04.1"},{"binary_name":"linux-oracle-5.15-tools-5.15.0-1067","binary_version":"5.15.0-1067.73~20.04.1"},{"binary_name":"linux-tools-5.15.0-1067-oracle","binary_version":"5.15.0-1067.73~20.04.1"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2024-36972","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}]},{"id":"CVE-2024-38381","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-38587","severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-39475","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-39493","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-39501","severity":[{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-39503","severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-40934","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-41049","severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-41055","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2024-42130","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:20.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7007-2.json"}}],"schema_version":"1.7.5"}