{"id":"USN-7003-5","summary":"linux-raspi-5.4 vulnerabilities","details":"\nIt was discovered that the JFS file system contained an out-of-bounds read\nvulnerability when printing xattr debug information. A local attacker could\nuse this to cause a denial of service (system crash). (CVE-2024-40902)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - MIPS architecture;\n  - PowerPC architecture;\n  - x86 architecture;\n  - ACPI drivers;\n  - Serial ATA and Parallel ATA drivers;\n  - Drivers core;\n  - GPIO subsystem;\n  - GPU drivers;\n  - Greybus drivers;\n  - HID subsystem;\n  - I2C subsystem;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Media drivers;\n  - VMware VMCI Driver;\n  - Network drivers;\n  - Pin controllers subsystem;\n  - S/390 drivers;\n  - SCSI drivers;\n  - USB subsystem;\n  - JFFS2 file system;\n  - JFS file system;\n  - File systems infrastructure;\n  - NILFS2 file system;\n  - IOMMU subsystem;\n  - Sun RPC protocol;\n  - Netfilter;\n  - Memory management;\n  - B.A.T.M.A.N. meshing protocol;\n  - CAN network layer;\n  - Ceph Core library;\n  - Networking core;\n  - IPv4 networking;\n  - IPv6 networking;\n  - IUCV driver;\n  - MAC80211 subsystem;\n  - NET/ROM layer;\n  - Network traffic control;\n  - SoC Audio for Freescale CPUs drivers;\n(CVE-2024-40916, CVE-2024-41035, CVE-2024-39469, CVE-2024-39499,\nCVE-2024-36978, CVE-2024-42092, CVE-2024-42087, CVE-2024-42102,\nCVE-2024-40978, CVE-2024-40902, CVE-2024-36974, CVE-2024-42096,\nCVE-2024-40974, CVE-2024-40904, CVE-2024-40905, CVE-2024-42153,\nCVE-2024-42106, CVE-2024-42070, CVE-2024-41097, CVE-2024-42090,\nCVE-2024-42105, CVE-2024-42104, CVE-2024-39502, CVE-2024-41089,\nCVE-2024-40945, CVE-2024-38619, CVE-2024-40961, CVE-2024-42127,\nCVE-2024-39487, CVE-2024-40988, CVE-2024-41044, CVE-2024-42236,\nCVE-2024-40942, CVE-2024-39506, CVE-2024-39509, CVE-2024-39503,\nCVE-2024-40934, CVE-2024-40959, CVE-2024-42101, CVE-2024-40960,\nCVE-2024-40968, CVE-2024-41087, CVE-2023-52803, CVE-2024-40987,\nCVE-2024-40943, CVE-2024-42089, CVE-2023-52887, CVE-2024-37078,\nCVE-2024-42148, CVE-2024-36894, CVE-2024-42097, CVE-2024-41006,\nCVE-2024-40984, CVE-2024-40963, CVE-2024-42223, CVE-2024-40912,\nCVE-2024-42086, CVE-2024-41049, CVE-2024-42157, CVE-2024-41034,\nCVE-2024-42145, CVE-2024-42124, CVE-2024-40995, CVE-2024-42224,\nCVE-2024-40981, CVE-2024-41095, CVE-2024-40901, CVE-2024-42115,\nCVE-2024-41041, CVE-2024-41007, CVE-2024-39505, CVE-2024-40932,\nCVE-2024-39495, CVE-2024-40980, CVE-2024-42084, CVE-2024-41046,\nCVE-2024-42119, CVE-2024-42076, CVE-2024-42232, CVE-2024-39501,\nCVE-2024-40958, CVE-2024-40941, CVE-2024-42093, CVE-2024-42094,\nCVE-2024-42154)\n","modified":"2026-05-23T01:48:17.585322841Z","published":"2024-10-01T13:21:56Z","related":["UBUNTU-CVE-2023-52803","UBUNTU-CVE-2023-52887","UBUNTU-CVE-2024-36894","UBUNTU-CVE-2024-36974","UBUNTU-CVE-2024-36978","UBUNTU-CVE-2024-37078","UBUNTU-CVE-2024-38619","UBUNTU-CVE-2024-39469","UBUNTU-CVE-2024-39487","UBUNTU-CVE-2024-39495","UBUNTU-CVE-2024-39499","UBUNTU-CVE-2024-39501","UBUNTU-CVE-2024-39502","UBUNTU-CVE-2024-39503","UBUNTU-CVE-2024-39505","UBUNTU-CVE-2024-39506","UBUNTU-CVE-2024-39509","UBUNTU-CVE-2024-40901","UBUNTU-CVE-2024-40902","UBUNTU-CVE-2024-40904","UBUNTU-CVE-2024-40905","UBUNTU-CVE-2024-40912","UBUNTU-CVE-2024-40916","UBUNTU-CVE-2024-40932","UBUNTU-CVE-2024-40934","UBUNTU-CVE-2024-40941","UBUNTU-CVE-2024-40942","UBUNTU-CVE-2024-40943","UBUNTU-CVE-2024-40945","UBUNTU-CVE-2024-40958","UBUNTU-CVE-2024-40959","UBUNTU-CVE-2024-40960","UBUNTU-CVE-2024-40961","UBUNTU-CVE-2024-40963","UBUNTU-CVE-2024-40968","UBUNTU-CVE-2024-40974","UBUNTU-CVE-2024-40978","UBUNTU-CVE-2024-40980","UBUNTU-CVE-2024-40981","UBUNTU-CVE-2024-40984","UBUNTU-CVE-2024-40987","UBUNTU-CVE-2024-40988","UBUNTU-CVE-2024-40995","UBUNTU-CVE-2024-41006","UBUNTU-CVE-2024-41007","UBUNTU-CVE-2024-41034","UBUNTU-CVE-2024-41035","UBUNTU-CVE-2024-41041","UBUNTU-CVE-2024-41044","UBUNTU-CVE-2024-41046","UBUNTU-CVE-2024-41049","UBUNTU-CVE-2024-41087","UBUNTU-CVE-2024-41089","UBUNTU-CVE-2024-41095","UBUNTU-CVE-2024-41097","UBUNTU-CVE-2024-42070","UBUNTU-CVE-2024-42076","UBUNTU-CVE-2024-42084","UBUNTU-CVE-2024-42086","UBUNTU-CVE-2024-42087","UBUNTU-CVE-2024-42089","UBUNTU-CVE-2024-42090","UBUNTU-CVE-2024-42092","UBUNTU-CVE-2024-42093","UBUNTU-CVE-2024-42094","UBUNTU-CVE-2024-42096","UBUNTU-CVE-2024-42097","UBUNTU-CVE-2024-42101","UBUNTU-CVE-2024-42102","UBUNTU-CVE-2024-42104","UBUNTU-CVE-2024-42105","UBUNTU-CVE-2024-42106","UBUNTU-CVE-2024-42115","UBUNTU-CVE-2024-42119","UBUNTU-CVE-2024-42124","UBUNTU-CVE-2024-42127","UBUNTU-CVE-2024-42145","UBUNTU-CVE-2024-42148","UBUNTU-CVE-2024-42153","UBUNTU-CVE-2024-42154","UBUNTU-CVE-2024-42157","UBUNTU-CVE-2024-42223","UBUNTU-CVE-2024-42224","UBUNTU-CVE-2024-42232","UBUNTU-CVE-2024-42236"],"upstream":["CVE-2024-39501","CVE-2024-39503","CVE-2024-40934","CVE-2024-41049","UBUNTU-CVE-2024-39501","UBUNTU-CVE-2024-39503","UBUNTU-CVE-2024-40934","UBUNTU-CVE-2024-41049"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-7003-5"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-39501"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-39503"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-40934"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-41049"}],"affected":[{"package":{"name":"linux-raspi-5.4","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/linux-raspi-5.4?arch=source&distro=esm-infra%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1116.128~18.04.1"}]}],"versions":["5.4.0-1013.13~18.04.1","5.4.0-1015.15~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.20~18.04.1","5.4.0-1019.21~18.04.1","5.4.0-1021.24~18.04.1","5.4.0-1022.25~18.04.1","5.4.0-1023.26~18.04.1","5.4.0-1025.28~18.04.1","5.4.0-1026.29~18.04.1","5.4.0-1028.31~18.04.1","5.4.0-1029.32~18.04.1","5.4.0-1030.33~18.04.1","5.4.0-1032.35~18.04.1","5.4.0-1033.36~18.04.1","5.4.0-1034.37~18.04.1","5.4.0-1035.38~18.04.1","5.4.0-1036.39~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1041.45~18.04.1","5.4.0-1042.46~18.04.3","5.4.0-1043.47~18.04.1","5.4.0-1044.48~18.04.1","5.4.0-1045.49~18.04.1","5.4.0-1046.50~18.04.1","5.4.0-1047.52~18.04.1","5.4.0-1048.53~18.04.1","5.4.0-1050.56~18.04.1","5.4.0-1052.58~18.04.1","5.4.0-1053.60~18.04.1","5.4.0-1055.62~18.04.1","5.4.0-1056.63~18.04.1","5.4.0-1058.65~18.04.1","5.4.0-1059.66~18.04.1","5.4.0-1060.68~18.04.1","5.4.0-1062.70~18.04.1","5.4.0-1065.75~18.04.1","5.4.0-1066.76~18.04.1","5.4.0-1068.78~18.04.1","5.4.0-1069.79~18.04.1","5.4.0-1070.80~18.04.1","5.4.0-1071.81~18.04.1","5.4.0-1073.84~18.04.1","5.4.0-1074.85~18.04.1","5.4.0-1077.88~18.04.2","5.4.0-1078.89~18.04.1","5.4.0-1079.90~18.04.1","5.4.0-1080.91~18.04.1","5.4.0-1081.92~18.04.1","5.4.0-1082.93~18.04.1","5.4.0-1083.94~18.04.1","5.4.0-1084.95~18.04.1","5.4.0-1085.96~18.04.1","5.4.0-1086.97~18.04.1","5.4.0-1088.99~18.04.1","5.4.0-1089.100~18.04.1","5.4.0-1090.101~18.04.1","5.4.0-1091.102~18.04.1","5.4.0-1092.103~18.04.1","5.4.0-1093.104~18.04.1","5.4.0-1094.105~18.04.1","5.4.0-1095.106~18.04.1","5.4.0-1096.107~18.04.1","5.4.0-1097.109~18.04.2","5.4.0-1098.110~18.04.2","5.4.0-1100.112~18.04.1","5.4.0-1101.113~18.04.1","5.4.0-1102.114~18.04.1","5.4.0-1103.115~18.04.1","5.4.0-1104.116~18.04.1","5.4.0-1105.117~18.04.1","5.4.0-1106.118~18.04.1","5.4.0-1107.119~18.04.1","5.4.0-1108.120~18.04.1","5.4.0-1109.121~18.04.1","5.4.0-1110.122~18.04.1","5.4.0-1111.123~18.04.1","5.4.0-1112.124~18.04.1","5.4.0-1114.126~18.04.1","5.4.0-1115.127~18.04.1"],"ecosystem_specific":{"binaries":[{"binary_name":"linux-buildinfo-5.4.0-1116-raspi","binary_version":"5.4.0-1116.128~18.04.1"},{"binary_name":"linux-headers-5.4.0-1116-raspi","binary_version":"5.4.0-1116.128~18.04.1"},{"binary_name":"linux-image-5.4.0-1116-raspi","binary_version":"5.4.0-1116.128~18.04.1"},{"binary_name":"linux-modules-5.4.0-1116-raspi","binary_version":"5.4.0-1116.128~18.04.1"},{"binary_name":"linux-raspi-5.4-headers-5.4.0-1116","binary_version":"5.4.0-1116.128~18.04.1"},{"binary_name":"linux-raspi-5.4-tools-5.4.0-1116","binary_version":"5.4.0-1116.128~18.04.1"},{"binary_name":"linux-tools-5.4.0-1116-raspi","binary_version":"5.4.0-1116.128~18.04.1"}],"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:18.04:LTS","cves":[{"id":"CVE-2024-39501","severity":[{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2024-39503","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2024-40934","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2024-41049","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7003-5.json"}}],"schema_version":"1.7.5"}