Skip to content
This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page. View CVE-2024-46783 →
Unrated

Vulnerability in linux-hwe-edge

UBUNTU-CVE-2024-46783 First seen on SecPulse

Auto-generated summary

Assembled by SecPulse from the source data (CVSS, CWE, affected versions) using templates — no AI involved. Check the original description and references below for exact details.

A vulnerability tracked as UBUNTU-CVE-2024-46783 has been found in linux-hwe-edge.
Risk of unauthorized operations or information disclosure.
What to do: upgrade linux-hwe-edge to 5.4.0-1135.145~18.04.1 or later.
If unsure, ask your IT team or search "linux-hwe-edge UBUNTU-CVE-2024-46783" on the vendor's site.

UBUNTU-CVE-2024-46783 (linux-hwe-edge)
Attack vector: local / no user interaction
Patched: 5.4.0-1135.145~18.04.1 — apply immediately
Plan: 1) Audit SBOM/dependencies, 2) Stage→prod upgrade, 3) Add WAF/proxy monitoring on affected endpoints, 4) Hunt IOCs in logs.
Refs: see the GHSA / vendor advisory / patched release linked on this page.

What is the problem

A vulnerability (unclassified) exists in linux-hwe-edge.

Affected scope

Check the vendor advisory for the affected versions of linux-hwe-edge.

Severity

Severity: ?. Risk of unauthorized operations or information disclosure.

How to fix

Update to 5.4.0-1135.145~18.04.1.

Workaround

Until the patch is applied: disable the affected feature, apply WAF rules, or restrict access via network ACLs.

Detection

Search webserver/proxy logs for unusual request patterns matching this CVE's known IOCs. Run grep -r 'linux-hwe-edge' . against your dependency files (package-lock.json, requirements.txt, go.sum) to find affected services.

Response actions

Concrete steps and command examples for SOC/SRE teams to execute in order

  1. 1
    Identify exposureidentify
    grep -r 'linux-hwe-edge' . | grep -v node_modules

    リポジトリと本番環境の依存ファイル (package-lock.json / requirements.txt / go.sum / Gemfile.lock 等) で linux-hwe-edge を grep し、稼働しているサービス・バージョンを把握する。

  2. 2
    Apply patchpatch
    Upgrade linux-hwe-edge to 5.4.0-1135.145~18.04.1

    ステージング環境で 5.4.0-1135.145~18.04.1 に上げて回帰テスト → 本番反映。回帰テストはアプリの主要ハッピーパスを含めること。

  3. 3
    Post-deployment verificationverify
    Confirm patched version is live in production

    パッチ適用後、ステージングで PoC または同等の悪用パターンを再現して脆弱性が閉じたことを確認。本番ではアクセスログ・WAF でアラート再発が無いか継続監視。

Affected packages

EcosystemPackageAffectedFixed
Ubuntu:16.04:LTS linux-hwe-edge
All versions
—
Ubuntu:18.04:LTS linux-aws-5.0
All versions
—
Ubuntu:18.04:LTS linux-aws-5.3
All versions
—
Ubuntu:Pro:18.04:LTS linux-aws-5.4
< 5.4.0-1135.145~18.04.1
5.4.0-1135.145~18.04.1
Ubuntu:18.04:LTS linux-azure
All versions
—
Ubuntu:18.04:LTS linux-azure-5.3
All versions
—
Ubuntu:Pro:18.04:LTS linux-azure-5.4
< 5.4.0-1140.147~18.04.1
5.4.0-1140.147~18.04.1
Ubuntu:18.04:LTS linux-azure-edge
All versions
—
Ubuntu:18.04:LTS linux-gcp
All versions
—
Ubuntu:18.04:LTS linux-gcp-5.3
All versions
—
Ubuntu:Pro:18.04:LTS linux-gcp-5.4
< 5.4.0-1139.148~18.04.1
5.4.0-1139.148~18.04.1
Ubuntu:18.04:LTS linux-gke-4.15
All versions
—
Ubuntu:18.04:LTS linux-gke-5.4
All versions
—
Ubuntu:18.04:LTS linux-gkeop-5.4
All versions
—
Ubuntu:18.04:LTS linux-hwe
All versions
—
Ubuntu:Pro:18.04:LTS linux-hwe-5.4
< 5.4.0-200.220~18.04.1
5.4.0-200.220~18.04.1
Ubuntu:18.04:LTS linux-hwe-edge
All versions
—
Ubuntu:Pro:18.04:LTS linux-ibm-5.4
< 5.4.0-1082.87~18.04.1
5.4.0-1082.87~18.04.1
Ubuntu:18.04:LTS linux-oem
All versions
—
Ubuntu:18.04:LTS linux-oracle-5.0
All versions
—
Ubuntu:18.04:LTS linux-oracle-5.3
All versions
—
Ubuntu:Pro:18.04:LTS linux-oracle-5.4
< 5.4.0-1134.143~18.04.1
5.4.0-1134.143~18.04.1
Ubuntu:Pro:18.04:LTS linux-raspi-5.4
< 5.4.0-1119.131~18.04.1
5.4.0-1119.131~18.04.1
Ubuntu:20.04:LTS linux
< 5.4.0-200.220
5.4.0-200.220
Ubuntu:20.04:LTS linux-aws
< 5.4.0-1135.145
5.4.0-1135.145
Ubuntu:20.04:LTS linux-aws-5.15
< 5.15.0-1072.78~20.04.1
5.15.0-1072.78~20.04.1
Ubuntu:20.04:LTS linux-azure
< 5.4.0-1140.147
5.4.0-1140.147
Ubuntu:20.04:LTS linux-azure-5.15
< 5.15.0-1078.87~20.04.1
5.15.0-1078.87~20.04.1
Ubuntu:20.04:LTS linux-bluefield
< 5.4.0-1095.102
5.4.0-1095.102
Ubuntu:20.04:LTS linux-gcp
< 5.4.0-1139.148
5.4.0-1139.148
Ubuntu:20.04:LTS linux-gcp-5.15
< 5.15.0-1071.79~20.04.1
5.15.0-1071.79~20.04.1
Ubuntu:20.04:LTS linux-gkeop
< 5.4.0-1102.106
5.4.0-1102.106
Ubuntu:20.04:LTS linux-gkeop-5.15
< 5.15.0-1055.62~20.04.1
5.15.0-1055.62~20.04.1
Ubuntu:20.04:LTS linux-hwe-5.15
< 5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
Ubuntu:20.04:LTS linux-ibm
< 5.4.0-1082.87
5.4.0-1082.87
Ubuntu:20.04:LTS linux-ibm-5.15
< 5.15.0-1065.68~20.04.1
5.15.0-1065.68~20.04.1
Ubuntu:20.04:LTS linux-intel-iotg-5.15
< 5.15.0-1067.73~20.04.1
5.15.0-1067.73~20.04.1
Ubuntu:20.04:LTS linux-iot
< 5.4.0-1044.45
5.4.0-1044.45
Ubuntu:20.04:LTS linux-kvm
< 5.4.0-1123.131
5.4.0-1123.131
Ubuntu:20.04:LTS linux-lowlatency-hwe-5.15
< 5.15.0-125.135~20.04.1
5.15.0-125.135~20.04.1
Ubuntu:20.04:LTS linux-nvidia-tegra-5.15
< 5.15.0-1032.32~20.04.1
5.15.0-1032.32~20.04.1
Ubuntu:20.04:LTS linux-oracle
< 5.4.0-1134.143
5.4.0-1134.143
Ubuntu:20.04:LTS linux-oracle-5.15
< 5.15.0-1070.76~20.04.1
5.15.0-1070.76~20.04.1
Ubuntu:20.04:LTS linux-raspi
< 5.4.0-1119.131
5.4.0-1119.131
Ubuntu:20.04:LTS linux-riscv-5.15
< 5.15.0-1068.72~20.04.1
5.15.0-1068.72~20.04.1
Ubuntu:20.04:LTS linux-xilinx-zynqmp
< 5.4.0-1054.58
5.4.0-1054.58
Ubuntu:20.04:LTS linux-aws-5.11
All versions
—
Ubuntu:20.04:LTS linux-aws-5.13
All versions
—
Ubuntu:20.04:LTS linux-aws-5.8
All versions
—
Ubuntu:20.04:LTS linux-azure-5.11
All versions
—
Ubuntu:20.04:LTS linux-azure-5.13
All versions
—
Ubuntu:20.04:LTS linux-azure-5.8
All versions
—
Ubuntu:20.04:LTS linux-azure-fde
All versions
—
Ubuntu:20.04:LTS linux-gcp-5.11
All versions
—
Ubuntu:20.04:LTS linux-gcp-5.13
All versions
—
Ubuntu:20.04:LTS linux-gcp-5.8
All versions
—
Ubuntu:20.04:LTS linux-gke
All versions
—
Ubuntu:20.04:LTS linux-gke-5.15
All versions
—
Ubuntu:20.04:LTS linux-hwe-5.11
All versions
—
Ubuntu:20.04:LTS linux-hwe-5.13
All versions
—
Ubuntu:20.04:LTS linux-hwe-5.8
All versions
—
Ubuntu:20.04:LTS linux-intel-5.13
All versions
—
Ubuntu:20.04:LTS linux-oem-5.10
All versions
—
Ubuntu:20.04:LTS linux-oem-5.13
All versions
—
Ubuntu:20.04:LTS linux-oem-5.14
All versions
—
Ubuntu:20.04:LTS linux-oem-5.6
All versions
—
Ubuntu:20.04:LTS linux-oracle-5.11
All versions
—
Ubuntu:20.04:LTS linux-oracle-5.13
All versions
—
Ubuntu:20.04:LTS linux-oracle-5.8
All versions
—
Ubuntu:20.04:LTS linux-raspi2
All versions
—
Ubuntu:20.04:LTS linux-riscv
All versions
—
Ubuntu:20.04:LTS linux-riscv-5.11
All versions
—
Ubuntu:20.04:LTS linux-riscv-5.8
All versions
—
Ubuntu:Pro:FIPS-updates:20.04:LTS linux-aws-fips
< 5.4.0-1135.145+fips1
5.4.0-1135.145+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS linux-azure-fips
< 5.4.0-1140.147+fips1
5.4.0-1140.147+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS linux-fips
< 5.4.0-1109.119
5.4.0-1109.119
Ubuntu:Pro:FIPS-updates:20.04:LTS linux-gcp-fips
< 5.4.0-1139.148+fips1
5.4.0-1139.148+fips1
Ubuntu:Pro:FIPS:20.04:LTS linux-aws-fips
All versions
—
Ubuntu:Pro:FIPS:20.04:LTS linux-azure-fips
All versions
—
Ubuntu:Pro:FIPS:20.04:LTS linux-fips
All versions
—
Ubuntu:Pro:FIPS:20.04:LTS linux-gcp-fips
All versions
—
Ubuntu:22.04:LTS linux
< 5.15.0-125.135
5.15.0-125.135
Ubuntu:22.04:LTS linux-allwinner-5.19
All versions
—
Ubuntu:22.04:LTS linux-aws
< 5.15.0-1072.78
5.15.0-1072.78
Ubuntu:22.04:LTS linux-aws-5.19
All versions
—
Ubuntu:22.04:LTS linux-aws-6.2
All versions
—
Ubuntu:22.04:LTS linux-aws-6.5
All versions
—
Ubuntu:22.04:LTS linux-aws-6.8
< 6.8.0-1020.22~22.04.1
6.8.0-1020.22~22.04.1
Ubuntu:22.04:LTS linux-azure
< 5.15.0-1075.84
5.15.0-1075.84
Ubuntu:22.04:LTS linux-azure-5.19
All versions
—
Ubuntu:22.04:LTS linux-azure-6.2
All versions
—
Ubuntu:22.04:LTS linux-azure-6.5
All versions
—
Ubuntu:22.04:LTS linux-azure-6.8
< 6.8.0-1020.23~22.04.1
6.8.0-1020.23~22.04.1
Ubuntu:22.04:LTS linux-azure-fde
< 5.15.0-1076.85.1
5.15.0-1076.85.1
Ubuntu:22.04:LTS linux-azure-fde-5.19
All versions
—
Ubuntu:22.04:LTS linux-azure-fde-6.2
All versions
—
Ubuntu:22.04:LTS linux-gcp
< 5.15.0-1071.79
5.15.0-1071.79
Ubuntu:22.04:LTS linux-gcp-5.19
All versions
—
Ubuntu:22.04:LTS linux-gcp-6.2
All versions
—
Ubuntu:22.04:LTS linux-gcp-6.5
All versions
—
Ubuntu:22.04:LTS linux-gcp-6.8
< 6.8.0-1019.21~22.04.1
6.8.0-1019.21~22.04.1
Ubuntu:22.04:LTS linux-gke
< 5.15.0-1069.75
5.15.0-1069.75
Ubuntu:22.04:LTS linux-gkeop
< 5.15.0-1055.62
5.15.0-1055.62
Ubuntu:22.04:LTS linux-hwe-5.19
All versions
—
Ubuntu:22.04:LTS linux-hwe-6.2
All versions
—
Ubuntu:22.04:LTS linux-hwe-6.5
All versions
—
Ubuntu:22.04:LTS linux-hwe-6.8
< 6.8.0-50.51~22.04.1
6.8.0-50.51~22.04.1
Ubuntu:22.04:LTS linux-ibm
< 5.15.0-1065.68
5.15.0-1065.68
Ubuntu:22.04:LTS linux-ibm-6.8
< 6.8.0-1017.17~22.04.1
6.8.0-1017.17~22.04.1
Ubuntu:22.04:LTS linux-intel-iotg
< 5.15.0-1067.73
5.15.0-1067.73
Ubuntu:22.04:LTS linux-kvm
< 5.15.0-1069.74
5.15.0-1069.74
Ubuntu:22.04:LTS linux-lowlatency
< 5.15.0-125.135
5.15.0-125.135
Ubuntu:22.04:LTS linux-lowlatency-hwe-5.19
All versions
—
Ubuntu:22.04:LTS linux-lowlatency-hwe-6.2
All versions
—
Ubuntu:22.04:LTS linux-lowlatency-hwe-6.5
All versions
—
Ubuntu:22.04:LTS linux-lowlatency-hwe-6.8
< 6.8.0-50.51.1~22.04.1
6.8.0-50.51.1~22.04.1
Ubuntu:22.04:LTS linux-nvidia
< 5.15.0-1067.68
5.15.0-1067.68
Ubuntu:22.04:LTS linux-nvidia-6.2
All versions
—
Ubuntu:22.04:LTS linux-nvidia-6.5
All versions
—
Ubuntu:22.04:LTS linux-nvidia-6.8
< 6.8.0-1019.21~22.04.1
6.8.0-1019.21~22.04.1
Ubuntu:22.04:LTS linux-nvidia-tegra
< 5.15.0-1032.32
5.15.0-1032.32
Ubuntu:22.04:LTS linux-nvidia-tegra-igx
< 5.15.0-1020.20
5.15.0-1020.20
Ubuntu:22.04:LTS linux-oem-5.17
All versions
—
Ubuntu:22.04:LTS linux-oem-6.0
All versions
—
Ubuntu:22.04:LTS linux-oem-6.1
All versions
—
Ubuntu:22.04:LTS linux-oem-6.5
All versions
—
Ubuntu:22.04:LTS linux-oracle
< 5.15.0-1070.76
5.15.0-1070.76
Ubuntu:22.04:LTS linux-oracle-6.5
All versions
—
Ubuntu:22.04:LTS linux-oracle-6.8
< 6.8.0-1017.18~22.04.1
6.8.0-1017.18~22.04.1
Ubuntu:22.04:LTS linux-raspi
< 5.15.0-1065.68
5.15.0-1065.68
Ubuntu:22.04:LTS linux-realtime
All versions
—
Ubuntu:22.04:LTS linux-riscv
All versions
—
Ubuntu:22.04:LTS linux-riscv-5.19
All versions
—
Ubuntu:22.04:LTS linux-riscv-6.5
All versions
—
Ubuntu:22.04:LTS linux-riscv-6.8
< 6.8.0-50.51.1~22.04.1
6.8.0-50.51.1~22.04.1
Ubuntu:22.04:LTS linux-starfive-5.19
All versions
—
Ubuntu:22.04:LTS linux-starfive-6.2
All versions
—
Ubuntu:22.04:LTS linux-starfive-6.5
All versions
—
Ubuntu:22.04:LTS linux-xilinx-zynqmp
< 5.15.0-1038.42
5.15.0-1038.42
Ubuntu:Nvidia-BlueField:22.04:LTS linux-bluefield
< 5.15.0-1056.58
5.15.0-1056.58
Ubuntu:Pro:FIPS-preview:22.04:LTS linux-aws-fips
All versions
—
Ubuntu:Pro:FIPS-preview:22.04:LTS linux-azure-fips
All versions
—
Ubuntu:Pro:FIPS-preview:22.04:LTS linux-fips
All versions
—
Ubuntu:Pro:FIPS-preview:22.04:LTS linux-gcp-fips
All versions
—
Ubuntu:Pro:FIPS-updates:22.04:LTS linux-aws-fips
< 5.15.0-1072.78+fips1
5.15.0-1072.78+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS linux-azure-fips
< 5.15.0-1075.84+fips1
5.15.0-1075.84+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS linux-fips
< 5.15.0-125.135+fips1
5.15.0-125.135+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS linux-gcp-fips
< 5.15.0-1071.79+fips1
5.15.0-1071.79+fips1
Ubuntu:Pro:Realtime:22.04:LTS linux-intel-iot-realtime
< 5.15.0-1066.68
5.15.0-1066.68
Ubuntu:Pro:Realtime:22.04:LTS linux-realtime
< 5.15.0-1073.81
5.15.0-1073.81
Ubuntu:Pro:Realtime:22.04:LTS linux-realtime-6.8
< 6.8.1-1013.14~22.04.1
6.8.1-1013.14~22.04.1
Ubuntu:24.04:LTS linux
< 6.8.0-50.51
6.8.0-50.51
Ubuntu:24.04:LTS linux-aws
< 6.8.0-1020.22
6.8.0-1020.22
Ubuntu:24.04:LTS linux-azure
< 6.8.0-1020.23
6.8.0-1020.23
Ubuntu:24.04:LTS linux-gcp
< 6.8.0-1019.21
6.8.0-1019.21
Ubuntu:24.04:LTS linux-gke
< 6.8.0-1015.19
6.8.0-1015.19
Ubuntu:24.04:LTS linux-gkeop
< 6.8.0-1002.4
6.8.0-1002.4
Ubuntu:24.04:LTS linux-ibm
< 6.8.0-1017.17
6.8.0-1017.17
Ubuntu:24.04:LTS linux-lowlatency
< 6.8.0-50.51.1
6.8.0-50.51.1
Ubuntu:24.04:LTS linux-nvidia
< 6.8.0-1019.21
6.8.0-1019.21
Ubuntu:24.04:LTS linux-nvidia-lowlatency
< 6.8.0-1019.21.1
6.8.0-1019.21.1
Ubuntu:24.04:LTS linux-oem-6.8
< 6.8.0-1018.18
6.8.0-1018.18
Ubuntu:24.04:LTS linux-oracle
< 6.8.0-1017.18
6.8.0-1017.18
Ubuntu:24.04:LTS linux-raspi
< 6.8.0-1016.18
6.8.0-1016.18
Ubuntu:24.04:LTS linux-riscv
< 6.8.0-50.51.1
6.8.0-50.51.1
Ubuntu:24.04:LTS linux-xilinx
< 6.8.0-1017.18
6.8.0-1017.18
Ubuntu:Pro:FIPS-updates:24.04:LTS linux-fips
< 6.8.0-78.78+fips1
6.8.0-78.78+fips1
Ubuntu:Pro:Realtime:24.04:LTS linux-raspi-realtime
< 6.8.0-2015.16
6.8.0-2015.16
Ubuntu:Pro:Realtime:24.04:LTS linux-realtime
< 6.8.1-1013.14
6.8.1-1013.14
Ubuntu:26.04 linux-nvidia
All versions
—
Ubuntu:Nvidia-BlueField:24.04:LTS linux-bluefield
All versions
—
Original description The description as published by the source.

In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: fix return value of tcp_bpf_sendmsg() When we cork messages in psock->cork, the last message triggers the flushing will result in sending a sk_msg larger than the current message size. In this case, in tcp_bpf_send_verdict(), 'copied' becomes negative at least in the following case: 468 case __SK_DROP: 469 default: 470 sk_msg_free_partial(sk, msg, tosend); 471 sk_msg_apply_bytes(psock, tosend); 472 *copied -= (tosend + delta); // <==== HERE 473 return -EACCES; Therefore, it could lead to the following BUG with a proper value of 'copied' (thanks to syzbot). We should not use negative 'copied' as a return value here. ------------[ cut here ]------------ kernel BUG at net/socket.c:733! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 UID: 0 PID: 3265 Comm: syz-executor510 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 Hardware name: linux,dummy-virt (DT) pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : sock_sendmsg_nosec net/socket.c:733 [inline] pc : sock_sendmsg_nosec net/socket.c:728 [inline] pc : __sock_sendmsg+0x5c/0x60 net/socket.c:745 lr : sock_sendmsg_nosec net/socket.c:730 [inline] lr : __sock_sendmsg+0x54/0x60 net/socket.c:745 sp : ffff800088ea3b30 x29: ffff800088ea3b30 x28: fbf00000062bc900 x27: 0000000000000000 x26:…

Source: OSV.dev (Open Source Vulnerabilities) OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details