--- title: 'USN-6896-2: Linux kernel vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-6896-2 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-6896-2 --- # USN-6896-2: Linux kernel vulnerabilities Publication date 16 July 2024 Overview Several security issues were fixed in the Linux kernel. Releases [18.04 LTS](https://ubuntu.com/security/notices?release=bionic) --- Open side navigation ## Packages * [linux-hwe-5.4](https://ubuntu.com/security/cves?package=linux-hwe-5.4) - Linux hardware enablement (HWE) kernel * [linux-oracle-5.4](https://ubuntu.com/security/cves?package=linux-oracle-5.4) - Linux kernel for Oracle Cloud systems ## Details It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. ([CVE-2023-6270](https://ubuntu.com/security/CVE-2023-6270)) It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. ([CVE-2023-7042](https://ubuntu.com/security/CVE-2023-7042)) Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). ([CVE-2024-22099](https://ubuntu.com/security/CVE-2024-22099)) Gui-Dong Han discovered that the software RAID driver in the Linux... --- Show more ## Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 18.04 LTS bionic | [linux-image-5.4.0-1127-oracle](https://launchpad.net/ubuntu/+source/linux-signed-oracle-5.4) –  5.4.0-1127.136~18.04.1   Ubuntu Pro | | | | [linux-image-5.4.0-189-generic](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.4) –  5.4.0-189.209~18.04.1   Ubuntu Pro | | | | [linux-image-5.4.0-189-lowlatency](https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.4) –  5.4.0-189.209~18.04.1   Ubuntu Pro | | | | [linux-image-generic-hwe-18.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4) –  5.4.0.189.209~18.04.1   Ubuntu Pro | | | | [linux-image-lowlatency-hwe-18.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4) –  5.4.0.189.209~18.04.1   Ubuntu Pro | | | | [linux-image-oem](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4) –  5.4.0.189.209~18.04.1   Ubuntu Pro | | | | [linux-image-oem-osp1](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4) –  5.4.0.189.209~18.04.1   Ubuntu Pro | | | | [linux-image-oracle](https://launchpad.net/ubuntu/+source/linux-meta-oracle-5.4) –  5.4.0.1127.136~18.04.1   Ubuntu Pro | | | | [linux-image-snapdragon-hwe-18.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4) –  5.4.0.189.209~18.04.1   Ubuntu Pro | | | | [linux-image-virtual-hwe-18.04](https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4) –  5.4.0.189.209~18.04.1   Ubuntu Pro | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References *Search* * [CVE-2024-36020](https://ubuntu.com/security/CVE-2024-36020) * [CVE-2024-36007](https://ubuntu.com/security/CVE-2024-36007) * [CVE-2024-36006](https://ubuntu.com/security/CVE-2024-36006) * [CVE-2024-36004](https://ubuntu.com/security/CVE-2024-36004) * [CVE-2024-35997](https://ubuntu.com/security/CVE-2024-35997) * [CVE-2024-35984](https://ubuntu.com/security/CVE-2024-35984) * [CVE-2024-35982](https://ubuntu.com/security/CVE-2024-35982) * [CVE-2024-35978](https://ubuntu.com/security/CVE-2024-35978) * [CVE-2024-35973](https://ubuntu.com/security/CVE-2024-35973) * [CVE-2024-35969](https://ubuntu.com/security/CVE-2024-35969) --- Show 137 more references ## Related notices id="usn" *Search* * [USN-8274-1](https://ubuntu.com/security/notices/USN-8274-1) * [USN-8267-1](https://ubuntu.com/security/notices/USN-8267-1) * [USN-8266-1](https://ubuntu.com/security/notices/USN-8266-1) * [USN-7988-1](https://ubuntu.com/security/notices/USN-7988-1) * [USN-7988-2](https://ubuntu.com/security/notices/USN-7988-2) * [USN-7988-3](https://ubuntu.com/security/notices/USN-7988-3) * [USN-7988-4](https://ubuntu.com/security/notices/USN-7988-4) * [USN-7988-5](https://ubuntu.com/security/notices/USN-7988-5) * [USN-7937-1](https://ubuntu.com/security/notices/USN-7937-1) * [USN-7875-1](https://ubuntu.com/security/notices/USN-7875-1) --- Show 135 more references --- Have additional questions? [Talk to a member of the team ›](https://wiki.ubuntu.com/SecurityTeam/FAQ?_ga=2.242131138.1744859116.1742138161-1500419473.1726851136&_gl=1*161muja*_gcl_au*MzUyMTIzNjI1LjE3MzYyNDQ4NTE.#Contact)