Users of Ubuntu 22.04 LTS are urged to update their systems immediately following a significant security patch issued by Canonical to address several critical vulnerabilities in the Linux kernel for Xilinx ZynqMP processors.
The Linux kernel for Xilinx Zynq UltraScale+ MPSoC (ZynqMP) is a specialized version of the Linux kernel that is tailored to support the features and hardware of the Xilinx Zynq UltraScale+ MPSoC family of processors.
These processors combine a quad-core ARM Cortex-A53 (64-bit) application processor, a dual-core ARM Cortex-R5 (32-bit) real-time processor, an ARM Mali-400 GPU, and programmable logic (FPGA).
The Linux kernel provides a robust foundation for both embedded and general-purpose applications on these devices.
If it is left unpatched, these flaws could allow attackers to compromise systems, potentially leading to unauthorized access or disruption.
“Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system”.
The patch resolves hundreds of CVEs, spanning vulnerabilities in subsystems, architectures, drivers, and protocols. A complete list of addressed CVEs is provided in the official security notice.
Investigate Real-World Malicious Links & Phishing Attacks With Threat Intelligence Lookup - Try for Free
The latest Linux kernel update delivers critical security patches and performance improvements across multiple subsystems:
Here’s the updated table with links for each associated CVE:
| Category/Subsystem | Details | Associated CVEs |
|---|---|---|
| Architectures | ARM32, RISC-V, S390, x86 | CVE-2024-49938, CVE-2024-49966, CVE-2024-50013, CVE-2024-50093 |
| Block Layer Subsystem | Storage block layer management | CVE-2024-49944, CVE-2024-50046, CVE-2024-50096 |
| ACPI Drivers | Advanced Configuration and Power Interface | CVE-2024-49985, CVE-2024-50040 |
| Drivers Core | Core drivers across subsystems | CVE-2024-49924, CVE-2024-49981 |
| ATA over Ethernet (AOE) | ATA protocol over Ethernet | CVE-2024-49877, CVE-2024-49975 |
| TPM Device Driver | Trusted Platform Module | CVE-2024-49902, CVE-2024-49903 |
| Clock Framework and Drivers | Timing and synchronization drivers | CVE-2024-50062, CVE-2024-49997 |
| EFI Core | Extensible Firmware Interface core functionality | CVE-2024-49977, CVE-2024-50024 |
| GPU Drivers | Graphics processing unit drivers | CVE-2024-50038, CVE-2024-50008 |
| File Systems | Ext4, BTRFS, Ceph, NFS (client/server/superblock), NILFS2, GFS2, F2FS, JFS | CVE-2024-49936, CVE-2024-49892, CVE-2024-50049 |
| Networking Core | IPv4, IPv6, CAN, Multipath TCP, MAC80211 | CVE-2024-49863, CVE-2024-50033, CVE-2024-50015 |
| USB Drivers | USB Device Class, USB Type-C Port Controller | CVE-2024-50019, CVE-2024-50059 |
| Bluetooth Subsystem | Bluetooth stack | CVE-2024-49913, CVE-2024-50044 |
| Kernel Security | SELinux, Simplified Mandatory Access Control Kernel framework | CVE-2024-49948, CVE-2024-50095 |
| Media Drivers | Amlogic Meson SoC drivers, AudioScience HPI, USB sound | CVE-2024-49973, CVE-2024-50038 |
| Memory Management | Kernel-level memory management | CVE-2024-49871, CVE-2024-50001 |
| Perf Events | Performance monitoring events | CVE-2024-49967, CVE-2024-49954 |
| Tracing Infrastructure | Kernel tracing framework | CVE-2024-49995, CVE-2024-49957 |
In addition to subsystem updates, Ubuntu has also released security updates addressing vulnerabilities affecting other systems.
Here’s the updated table with links embedded in the CVE identifiers:
| Missing CVEs | Affected Area |
|---|---|
| CVE-2024-49907 | Kernel memory management subsystem |
| CVE-2024-50062 | Clock framework and drivers |
| CVE-2024-36893 | ACPI drivers |
| CVE-2024-49903 | TPM device driver |
| CVE-2024-49886 | USB drivers |
| CVE-2024-50180 | Ethernet bonding drivers |
| CVE-2024-47757 | Networking Core |
| CVE-2024-49938 | Architectures (x86) |
| CVE-2024-47709 | Network Traffic Control |
| CVE-2024-49884 | Media drivers |
| CVE-2024-49977 | EFI core |
| CVE-2024-47734 | InfiniBand drivers |
| CVE-2024-49963 | GPU drivers |
| CVE-2024-47747 | Bluetooth subsystem |
| CVE-2024-50008 | GPU drivers |
| CVE-2024-47696 | File systems (Ceph, NFS) |
| CVE-2024-50038 | GPU drivers |
| CVE-2024-46695 | USB Type-C Port Controller Manager |
| CVE-2024-47705 | Media drivers |
| CVE-2024-49957 | Tracing infrastructure |
| CVE-2024-38538 | IPv6 Networking |
| CVE-2024-50019 | USB drivers |
| CVE-2024-38544 | IPv4 Networking |
| CVE-2024-50003 | SELinux security module |
| CVE-2024-50095 | Simplified Mandatory Access Control Kernel Framework |
| CVE-2024-50000 | File systems infrastructure |
| CVE-2024-49981 | Drivers core |
| CVE-2024-49863 | Networking core |
| CVE-2024-47710 | IPv4 networking |
| CVE-2024-49983 | Multipath TCP |
The vulnerabilities affect multiple subsystems and components within the Linux kernel, underscoring the complexity and breadth of the issues. For the full list, visit the Ubuntu Security Notice (USN-7166-4).
Canonical has provided a targeted kernel update to address these issues. The affected package is linux-xilinx-zynqmp, and the updated version is 5.15.0-1039.43. Users are advised to check their current version and upgrade immediately to ensure their systems are secure.
To apply the update, users should execute the following commands in their terminal:
sudo apt update
sudo apt upgrade
sudo rebootRebooting is critical to ensure all fixes are applied, and the newly updated kernel is used.
This patch introduces changes to the Application Binary Interface (ABI), requiring recompilation and reinstallation of any third-party kernel modules.
However, for most users who have not manually removed standard kernel metapackages (e.g., linux-generic), this process will be automated during the upgrade.
This update is part of Canonical’s ongoing commitment to ensuring the security and stability of its open-source operating system.
Given the severity and scope of the vulnerabilities, Ubuntu users are strongly encouraged to update their systems as soon as possible to avoid potential exploitation.
Integrating Application Security into Your CI/CD Workflows Using Jenkins & Jira -> Free Webinar
NSA, CISA, and NIST have released joint security guidelines to help organizations detect, contain, and…
Hackers are exploiting a command injection flaw in SiteGuard Server Edition, a web application firewall…
A newly registered domain copies Microsoft Teams’ login page and interface, raising concerns about a…
A 16-year-old flaw in Broadcom’s Wi-Fi software can let attackers within wireless range take control…
Google has announced a new set of Android security protections designed to stop mobile scams…
Hackers are exploiting flaws in Plex Media Server to install cryptocurrency mining malware, with a…