--- title: 'USN-7184-1: Linux kernel vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-7184-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-7184-1 --- # USN-7184-1: Linux kernel vulnerabilities Publication date 6 January 2025 Overview Several security issues were fixed in the Linux kernel. Releases [16.04 LTS](https://ubuntu.com/security/notices?release=xenial) [14.04 LTS](https://ubuntu.com/security/notices?release=trusty) --- Open side navigation ## Packages * [linux-aws](https://ubuntu.com/security/cves?package=linux-aws) - Linux kernel for Amazon Web Services (AWS) systems * [linux-kvm](https://ubuntu.com/security/cves?package=linux-kvm) - Linux kernel for cloud environments ## Details Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). ([CVE-2022-36402](https://ubuntu.com/security/CVE-2022-36402)) Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in the Linux kernel during device removal. A privileged attacker could use this to cause a denial of service (system crash). ([CVE-2023-35827](https://ubuntu.com/security/CVE-2023-35827)) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: * GPU drivers; * I2C subsystem; * Network drivers; * Pin controllers subsystem; * TTY drivers; * USB Mass Storage drivers; * Framebuffer layer; * Ext4 file system; * File systems... --- Show more ## Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 16.04 LTS xenial | [linux-image-4.4.0-1140-kvm](https://launchpad.net/ubuntu/+source/linux-kvm) –  4.4.0-1140.151   Ubuntu Pro | | | | [linux-image-4.4.0-1177-aws](https://launchpad.net/ubuntu/+source/linux-aws) –  4.4.0-1177.192   Ubuntu Pro | | | | [linux-image-aws](https://launchpad.net/ubuntu/+source/linux-meta-aws) –  4.4.0.1177.181   Ubuntu Pro | | | | [linux-image-kvm](https://launchpad.net/ubuntu/+source/linux-meta-kvm) –  4.4.0.1140.137   Ubuntu Pro | | | | 14.04 LTS trusty | [linux-image-4.4.0-1139-aws](https://launchpad.net/ubuntu/+source/linux-aws) –  4.4.0-1139.145   Ubuntu Pro | | | | [linux-image-aws](https://launchpad.net/ubuntu/+source/linux-meta-aws) –  4.4.0.1139.136   Ubuntu Pro | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References *Search* * [CVE-2024-53057](https://ubuntu.com/security/CVE-2024-53057) * [CVE-2024-49967](https://ubuntu.com/security/CVE-2024-49967) * [CVE-2024-45021](https://ubuntu.com/security/CVE-2024-45021) * [CVE-2024-44947](https://ubuntu.com/security/CVE-2024-44947) * [CVE-2024-44944](https://ubuntu.com/security/CVE-2024-44944) * [CVE-2024-43884](https://ubuntu.com/security/CVE-2024-43884) * [CVE-2024-43856](https://ubuntu.com/security/CVE-2024-43856) * [CVE-2024-42153](https://ubuntu.com/security/CVE-2024-42153) * [CVE-2024-42101](https://ubuntu.com/security/CVE-2024-42101) * [CVE-2024-42090](https://ubuntu.com/security/CVE-2024-42090) --- Show 20 more references ## Related notices id="usn" *Search* * [USN-7413-1](https://ubuntu.com/security/notices/USN-7413-1) * [USN-7196-1](https://ubuntu.com/security/notices/USN-7196-1) * [USN-7195-1](https://ubuntu.com/security/notices/USN-7195-1) * [USN-7195-2](https://ubuntu.com/security/notices/USN-7195-2) * [USN-7194-1](https://ubuntu.com/security/notices/USN-7194-1) * [USN-7186-1](https://ubuntu.com/security/notices/USN-7186-1) * [USN-7186-2](https://ubuntu.com/security/notices/USN-7186-2) * [USN-7185-1](https://ubuntu.com/security/notices/USN-7185-1) * [USN-7185-2](https://ubuntu.com/security/notices/USN-7185-2) * [USN-7183-1](https://ubuntu.com/security/notices/USN-7183-1) --- Show 136 more references --- Have additional questions? [Talk to a member of the team ›](https://wiki.ubuntu.com/SecurityTeam/FAQ?_ga=2.242131138.1744859116.1742138161-1500419473.1726851136&_gl=1*161muja*_gcl_au*MzUyMTIzNjI1LjE3MzYyNDQ4NTE.#Contact)