Rapid7 Vulnerability & Exploit Database

Ubuntu: (Multiple Advisories) (CVE-2024-40902): Linux kernel vulnerabilities

Free InsightVM Trial No Credit Card Necessary

2024 Attack Intel Report Latest research by Rapid7 Labs

Back to Search

Ubuntu: (Multiple Advisories) (CVE-2024-40902): Linux kernel vulnerabilities

Severity

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

07/12/2024

Created

09/13/2024

Added

09/12/2024

Modified

10/02/2024

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: xattr: fix buffer overflow for invalid xattr When an xattr size is not what is expected, it is printed out to the kernel log in hex format as a form of debugging. But when that xattr size is bigger than the expected size, printing it out can cause an access off the end of the buffer. Fix this all up by properly restricting the size of the debug hex dump in the kernel log.

Solution(s)

ubuntu-upgrade-linux-image-4-15-0-1135-oracle
ubuntu-upgrade-linux-image-4-15-0-1156-kvm
ubuntu-upgrade-linux-image-4-15-0-1166-gcp
ubuntu-upgrade-linux-image-4-15-0-1173-aws
ubuntu-upgrade-linux-image-4-15-0-1181-azure
ubuntu-upgrade-linux-image-4-15-0-229-generic
ubuntu-upgrade-linux-image-4-15-0-229-lowlatency
ubuntu-upgrade-linux-image-4-4-0-1136-aws
ubuntu-upgrade-linux-image-4-4-0-1137-kvm
ubuntu-upgrade-linux-image-4-4-0-1174-aws
ubuntu-upgrade-linux-image-4-4-0-259-generic
ubuntu-upgrade-linux-image-4-4-0-259-lowlatency
ubuntu-upgrade-linux-image-5-15-0-1035-xilinx-zynqmp
ubuntu-upgrade-linux-image-5-15-0-1052-gkeop
ubuntu-upgrade-linux-image-5-15-0-1062-ibm
ubuntu-upgrade-linux-image-5-15-0-1062-raspi
ubuntu-upgrade-linux-image-5-15-0-1064-intel-iotg
ubuntu-upgrade-linux-image-5-15-0-1064-nvidia
ubuntu-upgrade-linux-image-5-15-0-1064-nvidia-lowlatency
ubuntu-upgrade-linux-image-5-15-0-1066-gke
ubuntu-upgrade-linux-image-5-15-0-1066-kvm
ubuntu-upgrade-linux-image-5-15-0-1067-oracle
ubuntu-upgrade-linux-image-5-15-0-1068-gcp
ubuntu-upgrade-linux-image-5-15-0-1069-aws
ubuntu-upgrade-linux-image-5-15-0-1072-azure
ubuntu-upgrade-linux-image-5-15-0-1072-azure-fde
ubuntu-upgrade-linux-image-5-15-0-121-generic
ubuntu-upgrade-linux-image-5-15-0-121-generic-64k
ubuntu-upgrade-linux-image-5-15-0-121-generic-lpae
ubuntu-upgrade-linux-image-5-15-0-121-lowlatency
ubuntu-upgrade-linux-image-5-15-0-121-lowlatency-64k
ubuntu-upgrade-linux-image-5-4-0-1043-iot
ubuntu-upgrade-linux-image-5-4-0-1051-xilinx-zynqmp
ubuntu-upgrade-linux-image-5-4-0-1079-ibm
ubuntu-upgrade-linux-image-5-4-0-1092-bluefield
ubuntu-upgrade-linux-image-5-4-0-1099-gkeop
ubuntu-upgrade-linux-image-5-4-0-1116-raspi
ubuntu-upgrade-linux-image-5-4-0-1120-kvm
ubuntu-upgrade-linux-image-5-4-0-1131-oracle
ubuntu-upgrade-linux-image-5-4-0-1132-aws
ubuntu-upgrade-linux-image-5-4-0-1136-gcp
ubuntu-upgrade-linux-image-5-4-0-1137-azure
ubuntu-upgrade-linux-image-5-4-0-195-generic
ubuntu-upgrade-linux-image-5-4-0-195-generic-lpae
ubuntu-upgrade-linux-image-5-4-0-195-lowlatency
ubuntu-upgrade-linux-image-6-8-0-1010-gke
ubuntu-upgrade-linux-image-6-8-0-1011-raspi
ubuntu-upgrade-linux-image-6-8-0-1012-ibm
ubuntu-upgrade-linux-image-6-8-0-1012-oem
ubuntu-upgrade-linux-image-6-8-0-1012-oracle
ubuntu-upgrade-linux-image-6-8-0-1012-oracle-64k
ubuntu-upgrade-linux-image-6-8-0-1013-nvidia
ubuntu-upgrade-linux-image-6-8-0-1013-nvidia-64k
ubuntu-upgrade-linux-image-6-8-0-1013-nvidia-lowlatency
ubuntu-upgrade-linux-image-6-8-0-1013-nvidia-lowlatency-64k
ubuntu-upgrade-linux-image-6-8-0-1014-azure
ubuntu-upgrade-linux-image-6-8-0-1014-azure-fde
ubuntu-upgrade-linux-image-6-8-0-1014-gcp
ubuntu-upgrade-linux-image-6-8-0-1015-aws
ubuntu-upgrade-linux-image-6-8-0-44-generic
ubuntu-upgrade-linux-image-6-8-0-44-generic-64k
ubuntu-upgrade-linux-image-6-8-0-44-lowlatency
ubuntu-upgrade-linux-image-6-8-0-44-lowlatency-64k
ubuntu-upgrade-linux-image-6-8-0-45-generic
ubuntu-upgrade-linux-image-6-8-0-45-generic-64k
ubuntu-upgrade-linux-image-aws
ubuntu-upgrade-linux-image-aws-hwe
ubuntu-upgrade-linux-image-aws-lts-18-04
ubuntu-upgrade-linux-image-aws-lts-20-04
ubuntu-upgrade-linux-image-aws-lts-22-04
ubuntu-upgrade-linux-image-azure
ubuntu-upgrade-linux-image-azure-cvm
ubuntu-upgrade-linux-image-azure-fde
ubuntu-upgrade-linux-image-azure-fde-lts-22-04
ubuntu-upgrade-linux-image-azure-lts-18-04
ubuntu-upgrade-linux-image-azure-lts-20-04
ubuntu-upgrade-linux-image-azure-lts-22-04
ubuntu-upgrade-linux-image-bluefield
ubuntu-upgrade-linux-image-gcp
ubuntu-upgrade-linux-image-gcp-lts-18-04
ubuntu-upgrade-linux-image-gcp-lts-20-04
ubuntu-upgrade-linux-image-gcp-lts-22-04
ubuntu-upgrade-linux-image-generic
ubuntu-upgrade-linux-image-generic-64k
ubuntu-upgrade-linux-image-generic-64k-hwe-20-04
ubuntu-upgrade-linux-image-generic-64k-hwe-22-04
ubuntu-upgrade-linux-image-generic-64k-hwe-24-04
ubuntu-upgrade-linux-image-generic-hwe-16-04
ubuntu-upgrade-linux-image-generic-hwe-18-04
ubuntu-upgrade-linux-image-generic-hwe-20-04
ubuntu-upgrade-linux-image-generic-hwe-22-04
ubuntu-upgrade-linux-image-generic-hwe-24-04
ubuntu-upgrade-linux-image-generic-lpae
ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04
ubuntu-upgrade-linux-image-generic-lts-utopic
ubuntu-upgrade-linux-image-generic-lts-vivid
ubuntu-upgrade-linux-image-generic-lts-wily
ubuntu-upgrade-linux-image-generic-lts-xenial
ubuntu-upgrade-linux-image-gke
ubuntu-upgrade-linux-image-gke-5-15
ubuntu-upgrade-linux-image-gkeop
ubuntu-upgrade-linux-image-gkeop-5-15
ubuntu-upgrade-linux-image-gkeop-5-4
ubuntu-upgrade-linux-image-ibm
ubuntu-upgrade-linux-image-ibm-classic
ubuntu-upgrade-linux-image-ibm-lts-20-04
ubuntu-upgrade-linux-image-ibm-lts-24-04
ubuntu-upgrade-linux-image-intel
ubuntu-upgrade-linux-image-intel-iotg
ubuntu-upgrade-linux-image-kvm
ubuntu-upgrade-linux-image-lowlatency
ubuntu-upgrade-linux-image-lowlatency-64k
ubuntu-upgrade-linux-image-lowlatency-64k-hwe-20-04
ubuntu-upgrade-linux-image-lowlatency-64k-hwe-22-04
ubuntu-upgrade-linux-image-lowlatency-hwe-16-04
ubuntu-upgrade-linux-image-lowlatency-hwe-18-04
ubuntu-upgrade-linux-image-lowlatency-hwe-20-04
ubuntu-upgrade-linux-image-lowlatency-hwe-22-04
ubuntu-upgrade-linux-image-lowlatency-lts-utopic
ubuntu-upgrade-linux-image-lowlatency-lts-vivid
ubuntu-upgrade-linux-image-lowlatency-lts-wily
ubuntu-upgrade-linux-image-lowlatency-lts-xenial
ubuntu-upgrade-linux-image-nvidia
ubuntu-upgrade-linux-image-nvidia-6-8
ubuntu-upgrade-linux-image-nvidia-64k
ubuntu-upgrade-linux-image-nvidia-64k-6-8
ubuntu-upgrade-linux-image-nvidia-lowlatency
ubuntu-upgrade-linux-image-nvidia-lowlatency-64k
ubuntu-upgrade-linux-image-oem
ubuntu-upgrade-linux-image-oem-20-04
ubuntu-upgrade-linux-image-oem-20-04b
ubuntu-upgrade-linux-image-oem-20-04c
ubuntu-upgrade-linux-image-oem-20-04d
ubuntu-upgrade-linux-image-oem-22-04
ubuntu-upgrade-linux-image-oem-22-04a
ubuntu-upgrade-linux-image-oem-22-04b
ubuntu-upgrade-linux-image-oem-22-04c
ubuntu-upgrade-linux-image-oem-22-04d
ubuntu-upgrade-linux-image-oem-osp1
ubuntu-upgrade-linux-image-oracle
ubuntu-upgrade-linux-image-oracle-64k
ubuntu-upgrade-linux-image-oracle-lts-18-04
ubuntu-upgrade-linux-image-oracle-lts-20-04
ubuntu-upgrade-linux-image-oracle-lts-22-04
ubuntu-upgrade-linux-image-raspi
ubuntu-upgrade-linux-image-raspi-hwe-18-04
ubuntu-upgrade-linux-image-raspi-nolpae
ubuntu-upgrade-linux-image-raspi2
ubuntu-upgrade-linux-image-raspi2-hwe-18-04
ubuntu-upgrade-linux-image-snapdragon-hwe-18-04
ubuntu-upgrade-linux-image-virtual
ubuntu-upgrade-linux-image-virtual-hwe-16-04
ubuntu-upgrade-linux-image-virtual-hwe-18-04
ubuntu-upgrade-linux-image-virtual-hwe-20-04
ubuntu-upgrade-linux-image-virtual-hwe-22-04
ubuntu-upgrade-linux-image-virtual-hwe-24-04
ubuntu-upgrade-linux-image-virtual-lts-utopic
ubuntu-upgrade-linux-image-virtual-lts-vivid
ubuntu-upgrade-linux-image-virtual-lts-wily
ubuntu-upgrade-linux-image-virtual-lts-xenial
ubuntu-upgrade-linux-image-xilinx-zynqmp

References

https://attackerkb.com/topics/cve-2024-40902
CVE - 2024-40902
USN-6999-1
USN-6999-2
USN-7003-1
USN-7003-2
USN-7003-3
USN-7003-4
USN-7003-5
USN-7004-1
USN-7005-1
USN-7005-2
USN-7006-1
USN-7007-1
USN-7007-2
USN-7007-3
USN-7008-1
USN-7009-1
USN-7009-2
USN-7019-1
USN-7028-1
USN-7029-1
USN-7039-1

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;

Rapid7 Vulnerability & Exploit Database

Ubuntu: (Multiple Advisories) (CVE-2024-40902): Linux kernel vulnerabilities

Ubuntu: (Multiple Advisories) (CVE-2024-40902): Linux kernel vulnerabilities

Description

Solution(s)

References

Success! Thank you for submission. We will be in touch shortly.

Oops! There was a problem in submission. Please try again.

Submit your information and we will get in touch with you.