{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/ubuntu18.04els/vex/2024/cve-2024-57948-els_os-ubuntu18_04els.json" } ], "title": "Security update on CVE-2024-57948", "tracking": { "current_release_date": "2025-12-23T22:15:38Z", "generator": { "date": "2025-12-23T22:15:38Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2024-57948-ELS_OS-UBUNTU18.04ELS", "initial_release_date": "2024-01-01T00:00:00Z", "revision_history": [ { "date": "2024-01-01T00:00:00Z", "number": "1", "summary": "Initial version" }, { "date": "2025-05-19T15:23:20Z", "number": "2", "summary": "Official Publication" }, { "date": "2025-12-23T22:15:38Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Ubuntu 18.04", "product": { "name": "Ubuntu 18.04", "product_id": "Ubuntu-18", "product_identification_helper": { "cpe": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*" } } } ], "category": "product_family", "name": "Ubuntu" } ], "category": "vendor", "name": "Canonical Ltd." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "linux-image-generic-0:4.15.0.246.257.amd64", "product": { "name": "linux-image-generic-0:4.15.0.246.257.amd64", "product_id": "linux-image-generic-0:4.15.0.246.257.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/linux-image-generic@4.15.0.246.257?arch=amd64" } } }, { "category": "product_version", "name": "linux-tools-4.15.0-246-tuxcare.els34-0:4.15.0-246.257.amd64", "product": { "name": "linux-tools-4.15.0-246-tuxcare.els34-0:4.15.0-246.257.amd64", "product_id": "linux-tools-4.15.0-246-tuxcare.els34-0:4.15.0-246.257.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/linux-tools-4.15.0-246-tuxcare.els34@4.15.0-246.257?arch=amd64" } } }, { "category": "product_version", "name": "linux-cloud-tools-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64", "product": { "name": "linux-cloud-tools-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64", "product_id": "linux-cloud-tools-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/linux-cloud-tools-4.15.0-246-tuxcare.els34-generic@4.15.0-246.257?arch=amd64" } } }, { "category": "product_version", "name": "linux-generic-0:4.15.0.246.257.amd64", "product": { "name": "linux-generic-0:4.15.0.246.257.amd64", "product_id": "linux-generic-0:4.15.0.246.257.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/linux-generic@4.15.0.246.257?arch=amd64" } } }, { "category": "product_version", "name": "linux-modules-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64", "product": { "name": "linux-modules-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64", "product_id": "linux-modules-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/linux-modules-4.15.0-246-tuxcare.els34-lowlatency@4.15.0-246.257?arch=amd64" } } }, { "category": "product_version", "name": "linux-headers-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64", "product": { "name": "linux-headers-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64", "product_id": "linux-headers-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/linux-headers-4.15.0-246-tuxcare.els34-lowlatency@4.15.0-246.257?arch=amd64" } } }, { "category": "product_version", "name": "linux-cloud-tools-lowlatency-0:4.15.0.246.257.amd64", "product": { "name": "linux-cloud-tools-lowlatency-0:4.15.0.246.257.amd64", "product_id": "linux-cloud-tools-lowlatency-0:4.15.0.246.257.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/linux-cloud-tools-lowlatency@4.15.0.246.257?arch=amd64" } } }, { "category": "product_version", "name": "linux-modules-extra-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64", "product": { "name": "linux-modules-extra-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64", "product_id": "linux-modules-extra-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/linux-modules-extra-4.15.0-246-tuxcare.els34-generic@4.15.0-246.257?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "linux-tools-host-0:4.15.0-246.257.all", "product": { "name": "linux-tools-host-0:4.15.0-246.257.all", "product_id": "linux-tools-host-0:4.15.0-246.257.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/linux-tools-host@4.15.0-246.257?arch=all" } } }, { "category": "product_version", "name": "linux-doc-0:4.15.0-246.257.all", "product": { "name": "linux-doc-0:4.15.0-246.257.all", "product_id": "linux-doc-0:4.15.0-246.257.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/linux-doc@4.15.0-246.257?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "linux-image-generic-0:4.15.0.246.257.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:linux-image-generic-0:4.15.0.246.257.amd64" }, "product_reference": "linux-image-generic-0:4.15.0.246.257.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "linux-tools-4.15.0-246-tuxcare.els34-0:4.15.0-246.257.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:linux-tools-4.15.0-246-tuxcare.els34-0:4.15.0-246.257.amd64" }, "product_reference": "linux-tools-4.15.0-246-tuxcare.els34-0:4.15.0-246.257.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "linux-cloud-tools-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:linux-cloud-tools-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64" }, "product_reference": "linux-cloud-tools-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "linux-generic-0:4.15.0.246.257.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:linux-generic-0:4.15.0.246.257.amd64" }, "product_reference": "linux-generic-0:4.15.0.246.257.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "linux-modules-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:linux-modules-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64" }, "product_reference": "linux-modules-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:linux-headers-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64" }, "product_reference": "linux-headers-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "linux-tools-host-0:4.15.0-246.257.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:linux-tools-host-0:4.15.0-246.257.all" }, "product_reference": "linux-tools-host-0:4.15.0-246.257.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "linux-doc-0:4.15.0-246.257.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:linux-doc-0:4.15.0-246.257.all" }, "product_reference": "linux-doc-0:4.15.0-246.257.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "linux-cloud-tools-lowlatency-0:4.15.0.246.257.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:linux-cloud-tools-lowlatency-0:4.15.0.246.257.amd64" }, "product_reference": "linux-cloud-tools-lowlatency-0:4.15.0.246.257.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "linux-modules-extra-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:linux-modules-extra-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64" }, "product_reference": "linux-modules-extra-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64", "relates_to_product_reference": "Ubuntu-18" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-57948", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nmac802154: check local interfaces before deleting sdata list\nsyzkaller reported a corrupted list in ieee802154_if_remove. [1]\nRemove an IEEE 802.15.4 network interface after unregister an IEEE 802.15.4\nhardware device from the system.\nCPU0CPU1\n========\ngenl_family_rcv_msg_doitieee802154_unregister_hw\nieee802154_del_ifaceieee802154_remove_interfaces\nrdev_del_virtual_intf_deprecatedlist_del(&sdata->list)\nieee802154_if_remove\nlist_del_rcu\nThe net device has been unregistered, since the rcu grace period,\nunregistration must be run before ieee802154_if_remove.\nTo avoid this issue, add a check for local->interfaces before deleting\nsdata list.\n[1]\nkernel BUG at lib/list_debug.c:58!\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 0 UID: 0 PID: 6277 Comm: syz-executor157 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nRIP: 0010:__list_del_entry_valid_or_report+0xf4/0x140 lib/list_debug.c:56\nCode: e8 a1 7e 00 07 90 0f 0b 48 c7 c7 e0 37 60 8c 4c 89 fe e8 8f 7e 00 07 90 0f 0b 48 c7 c7 40 38 60 8c 4c 89 fe e8 7d 7e 00 07 90 <0f> 0b 48 c7 c7 a0 38 60 8c 4c 89 fe e8 6b 7e 00 07 90 0f 0b 48 c7\nRSP: 0018:ffffc9000490f3d0 EFLAGS: 00010246\nRAX: 000000000000004e RBX: dead000000000122 RCX: d211eee56bb28d00\nRDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000\nRBP: ffff88805b278dd8 R08: ffffffff8174a12c R09: 1ffffffff2852f0d\nR10: dffffc0000000000 R11: fffffbfff2852f0e R12: dffffc0000000000\nR13: dffffc0000000000 R14: dead000000000100 R15: ffff88805b278cc0\nFS: 0000555572f94380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000056262e4a3000 CR3: 0000000078496000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n\n__list_del_entry_valid include/linux/list.h:124 [inline]\n__list_del_entry include/linux/list.h:215 [inline]\nlist_del_rcu include/linux/rculist.h:157 [inline]\nieee802154_if_remove+0x86/0x1e0 net/mac802154/iface.c:687\nrdev_del_virtual_intf_deprecated net/ieee802154/rdev-ops.h:24 [inline]\nieee802154_del_iface+0x2c0/0x5c0 net/ieee802154/nl-phy.c:323\ngenl_family_rcv_msg_doit net/netlink/genetlink.c:1115 [inline]\ngenl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]\ngenl_rcv_msg+0xb14/0xec0 net/netlink/genetlink.c:1210\nnetlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2551\ngenl_rcv+0x28/0x40 net/netlink/genetlink.c:1219\nnetlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline]\nnetlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1357\nnetlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901\nsock_sendmsg_nosec net/socket.c:729 [inline]\n__sock_sendmsg+0x221/0x270 net/socket.c:744\n____sys_sendmsg+0x52a/0x7e0 net/socket.c:2607\n___sys_sendmsg net/socket.c:2661 [inline]\n__sys_sendmsg+0x292/0x380 net/socket.c:2690\ndo_syscall_x64 arch/x86/entry/common.c:52 [inline]\ndo_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\nentry_SYSCALL_64_after_hwframe+0x77/0x7f", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-18:linux-image-generic-0:4.15.0.246.257.amd64", "Ubuntu-18:linux-tools-4.15.0-246-tuxcare.els34-0:4.15.0-246.257.amd64", "Ubuntu-18:linux-cloud-tools-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64", "Ubuntu-18:linux-generic-0:4.15.0.246.257.amd64", "Ubuntu-18:linux-modules-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64", "Ubuntu-18:linux-headers-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64", "Ubuntu-18:linux-tools-host-0:4.15.0-246.257.all", "Ubuntu-18:linux-doc-0:4.15.0-246.257.all", "Ubuntu-18:linux-cloud-tools-lowlatency-0:4.15.0.246.257.amd64", "Ubuntu-18:linux-modules-extra-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-57948" } ], "release_date": "2025-01-31T00:00:00", "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-18:linux-image-generic-0:4.15.0.246.257.amd64", "Ubuntu-18:linux-tools-4.15.0-246-tuxcare.els34-0:4.15.0-246.257.amd64", "Ubuntu-18:linux-cloud-tools-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64", "Ubuntu-18:linux-generic-0:4.15.0.246.257.amd64", "Ubuntu-18:linux-modules-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64", "Ubuntu-18:linux-headers-4.15.0-246-tuxcare.els34-lowlatency-0:4.15.0-246.257.amd64", "Ubuntu-18:linux-tools-host-0:4.15.0-246.257.all", "Ubuntu-18:linux-doc-0:4.15.0-246.257.all", "Ubuntu-18:linux-cloud-tools-lowlatency-0:4.15.0.246.257.amd64", "Ubuntu-18:linux-modules-extra-4.15.0-246-tuxcare.els34-generic-0:4.15.0-246.257.amd64" ] } ], "threats": [ { "category": "impact", "details": "Medium" } ] } ] }