Ubuntu alert USN-7758-4 (linux-oracle-6.8)

From:
             
 
Giampaolo Fresi Roglia <giampaolo.fresi.roglia@canonical.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7758-4]  Linux kernel (Oracle) vulnerability
Date:
             
 
Fri, 19 Sep 2025 12:25:55 +0200
Message-ID:
             
 
<87tt0yspqk.fsf@canonical.com>
==========================================================================
Ubuntu Security Notice USN-7758-4
September 19, 2025

linux-oracle-6.8 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS

Summary:

The system could be made to crash or run programs as an administrator.

Software Description:
- linux-oracle-6.8: Linux kernel for Oracle Cloud systems

Details:

It was discovered that the AF_UNIX socket garbage collection implementation
in Ubuntu Noble's 6.8 kernel did not properly handle out-of-band (OOB)
messages, leading to a use-after-free vulnerability. An attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
  linux-image-6.8.0-1035-oracle   6.8.0-1035.36~22.04.1
  linux-image-6.8.0-1035-oracle-64k  6.8.0-1035.36~22.04.1
  linux-image-oracle              6.8.0-1035.36~22.04.1
  linux-image-oracle-6.8          6.8.0-1035.36~22.04.1
  linux-image-oracle-64k          6.8.0-1035.36~22.04.1
  linux-image-oracle-64k-6.8      6.8.0-1035.36~22.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
  https://ubuntu.com/security/notices/USN-7758-4
  https://ubuntu.com/security/notices/USN-7758-3
  https://ubuntu.com/security/notices/USN-7758-2
  https://ubuntu.com/security/notices/USN-7758-1
  https://launchpad.net/bugs/2121515

Package Information:
  https://launchpad.net/ubuntu/+source/linux-oracle-6.8/6.8...



Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=/HZz
-----END PGP SIGNATURE-----