Affected: Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.

Affected: Ubuntu:22.04:LTS: linux-aws-6.5, Ubuntu:22.04:LTS: linux-azure-6.5, Ubuntu:22.04:LTS: linux-gcp-6.5, Ubuntu:22.04:LTS: linux-hwe-6.5, Ubuntu:22.04:LTS: linux-lowlatency-hwe-6.5, Ubuntu:22.04:LTS: linux-nvidia-6.5, Ubuntu:22.04:LTS: linux-oem-6.5, Ubuntu:22.04:LTS: linux-oracle-6.5, Ubuntu:22.04:LTS: linux-starfive-6.5

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware random number generator core; - Ext4 file system; - JFS file system; - Bluetooth subsystem; - Networking core; - IPv4 networking; - Logical Link layer; - Netlink; - Tomoyo security module; (CVE-2024-26704, CVE-2023-52615, CVE-2024-26805, CVE-2023-52604, CVE-2024-26614, CVE-2023-52602, CVE-2024-26635, CVE-2024-26622, CVE-2023-52601, CVE-2024-26801)