Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
This vulnerability is listed in the catalog of vulnerabilities that have been confirmed by CISA to be actively exploited. It is not a theoretical risk — it is being used in the wild.
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
The kernel update released for Ubuntu 24.04 LTS addresses a use-after-free vulnerability in the nf_tables component.
A signal handler race condition in the OpenSSH server carries a risk of unauthenticated RCE as root.
Bulk security patches for the OpenSSL, curl, sudo and systemd packages were published this month.