---
title: 'USN-7005-1: Linux kernel vulnerabilities | Ubuntu security notices'
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/notices/USN-7005-1
---

1. [Ubuntu Security Notices](https://ubuntu.com/security/notices)
2. USN-7005-1

---

# USN-7005-1: Linux kernel vulnerabilities

Publication date

12 September 2024

Overview

Several security issues were fixed in the Linux kernel.

Releases

[24.04 LTS](https://ubuntu.com/security/notices?release=noble)

---

Open side navigation

## Packages

* [linux-nvidia](https://ubuntu.com/security/cves?package=linux-nvidia) - Linux kernel for NVIDIA systems
* [linux-nvidia-lowlatency](https://ubuntu.com/security/cves?package=linux-nvidia-lowlatency) - Linux low latency kernel for NVIDIA systems

## Details

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel
contained a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. ([CVE-2024-23848](https://ubuntu.com/security/CVE-2024-23848))

It was discovered that the JFS file system contained an out-of-bounds read
vulnerability when printing xattr debug information. A local attacker could
use this to cause a denial of service (system crash). ([CVE-2024-40902](https://ubuntu.com/security/CVE-2024-40902))

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

* ARM64 architecture;
* MIPS architecture;
* PA-RISC architecture;
* PowerPC architecture;
* RISC-V architecture;
* x86 architecture;
* Block layer subsystem;
* ACPI...

---

Show more

## Update instructions

After a standard system update you need to reboot your computer to make
all the necessary changes.

[Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security)

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

The problem can be corrected by updating your system to the following package versions:

| Ubuntu Release | Package Version |
| --- | --- |
| 24.04 LTS noble | [linux-image-6.8.0-1013-nvidia](https://launchpad.net/ubuntu/+source/linux-signed-nvidia) –  [6.8.0-1013.14](https://launchpad.net/ubuntu/+source/linux-signed-nvidia/6.8.0-1013.14) | | |
| [linux-image-6.8.0-1013-nvidia-64k](https://launchpad.net/ubuntu/+source/linux-signed-nvidia) –  [6.8.0-1013.14](https://launchpad.net/ubuntu/+source/linux-signed-nvidia/6.8.0-1013.14) | | |
| [linux-image-6.8.0-1013-nvidia-lowlatency](https://launchpad.net/ubuntu/+source/linux-signed-nvidia-lowlatency) –  [6.8.0-1013.14.1](https://launchpad.net/ubuntu/+source/linux-signed-nvidia-lowlatency/6.8.0-1013.14.1) | | |
| [linux-image-6.8.0-1013-nvidia-lowlatency-64k](https://launchpad.net/ubuntu/+source/linux-signed-nvidia-lowlatency) –  [6.8.0-1013.14.1](https://launchpad.net/ubuntu/+source/linux-signed-nvidia-lowlatency/6.8.0-1013.14.1) | | |
| [linux-image-nvidia](https://launchpad.net/ubuntu/+source/linux-meta-nvidia) –  [6.8.0-1013.13](https://launchpad.net/ubuntu/+source/linux-meta-nvidia/6.8.0-1013.13) | | |
| [linux-image-nvidia-64k](https://launchpad.net/ubuntu/+source/linux-meta-nvidia) –  [6.8.0-1013.13](https://launchpad.net/ubuntu/+source/linux-meta-nvidia/6.8.0-1013.13) | | |
| [linux-image-nvidia-lowlatency](https://launchpad.net/ubuntu/+source/linux-meta-nvidia-lowlatency) –  [6.8.0-1013.14.1](https://launchpad.net/ubuntu/+source/linux-meta-nvidia-lowlatency/6.8.0-1013.14.1) | | |
| [linux-image-nvidia-lowlatency-64k](https://launchpad.net/ubuntu/+source/linux-meta-nvidia-lowlatency) –  [6.8.0-1013.14.1](https://launchpad.net/ubuntu/+source/linux-meta-nvidia-lowlatency/6.8.0-1013.14.1) | | |

---

### Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

[Get Ubuntu Pro](https://ubuntu.com/pro)

## References

*Search*

* [CVE-2024-42148](https://ubuntu.com/security/CVE-2024-42148)
* [CVE-2024-42078](https://ubuntu.com/security/CVE-2024-42078)
* [CVE-2024-41040](https://ubuntu.com/security/CVE-2024-41040)
* [CVE-2024-41006](https://ubuntu.com/security/CVE-2024-41006)
* [CVE-2024-41005](https://ubuntu.com/security/CVE-2024-41005)
* [CVE-2024-41004](https://ubuntu.com/security/CVE-2024-41004)
* [CVE-2024-41003](https://ubuntu.com/security/CVE-2024-41003)
* [CVE-2024-41002](https://ubuntu.com/security/CVE-2024-41002)
* [CVE-2024-41001](https://ubuntu.com/security/CVE-2024-41001)
* [CVE-2024-41000](https://ubuntu.com/security/CVE-2024-41000)

---

Show 209 more references

## Related notices

id="usn"
*Search*

* [USN-8243-1](https://ubuntu.com/security/notices/USN-8243-1)
* [USN-8163-1](https://ubuntu.com/security/notices/USN-8163-1)
* [USN-8163-2](https://ubuntu.com/security/notices/USN-8163-2)
* [USN-8141-1](https://ubuntu.com/security/notices/USN-8141-1)
* [USN-8116-1](https://ubuntu.com/security/notices/USN-8116-1)
* [USN-8096-1](https://ubuntu.com/security/notices/USN-8096-1)
* [USN-8096-2](https://ubuntu.com/security/notices/USN-8096-2)
* [USN-8096-3](https://ubuntu.com/security/notices/USN-8096-3)
* [USN-8096-4](https://ubuntu.com/security/notices/USN-8096-4)
* [USN-8096-5](https://ubuntu.com/security/notices/USN-8096-5)

---

Show 138 more references

---

Have additional questions?

[Talk to a member of the team ›](https://wiki.ubuntu.com/SecurityTeam/FAQ?_ga=2.242131138.1744859116.1742138161-1500419473.1726851136&_gl=1*161muja*_gcl_au*MzUyMTIzNjI1LjE3MzYyNDQ4NTE.#Contact)
