InfoSecBulletin Cybersecurity for mankind
Ubuntu 22.04 LTS users are advised to update their systems right away due to a crucial security patch from Canonical that fixes critical vulnerabilities in the Linux kernel for Xilinx ZynqMP processors.
The Linux kernel for Xilinx Zynq UltraScale+ MPSoC is customized to support the features and hardware of these processors.
B1ack’s Stash Releases 1 Million Credit Cards on a Deep Web Forum
Cisco Confirms
Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
AWS Key Hunter
Test this free automated tool to hunt for exposed AWS secrets
Check Point Flaw Used to Deploy ShadowPad and Ransomware
CVE-2024-12284
Citrix Issues Security Update for NetScaler Console
CISA and FBI ALERT
Ghost ransomware to breach organizations in 70 countries
Hacker chains multiple vulns to attack Palo Alto Firewall
150 Gov.t Portal affected
Black-Hat SEO Poisoning Indian “.gov.in, .ac.in” domain
CVE-2018-19410 Exposes 600 PRTG Instances in Bangladesh
Builder claims Rs 150 cr for data loss; AWS faces FIR In Bengaluru
These processors feature a quad-core ARM Cortex-A53 (64-bit) application processor, a dual-core ARM Cortex-R5 (32-bit) real-time processor, an ARM Mali-400 GPU, and programmable logic (FPGA).
The Linux kernel is a strong foundation for embedded and general-purpose applications on devices. If unpatched, these flaws could let attackers gain unauthorized access or disrupt systems.
“Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system”.
The patch fixes hundreds of CVEs across various subsystems, architectures, drivers, and protocols. A full list of fixed CVEs can be found in the official security notice.
The new Linux kernel update brings important security fixes and performance enhancements across several subsystems:
Architectures: Updates for ARM32, x86, RISC-V, and S390.
File Systems: Enhanced security and performance for BTRFS, Ext4, GFS2, Ceph, NFS, JFS, and F2FS.
Drivers: Fixes for GPU, USB, Bluetooth, GPIO, Ethernet bonding, and InfiniBand drivers.
Networking: Improvements to TCP, SCTP, IPv4, IPv6, Netfilter, and more.
Security Frameworks: Updates for SELinux and access control modules.
Core Components: Optimizations for memory management and tracing infrastructure.
Ubuntu has released security updates for vulnerabilities in other systems, along with subsystem updates.
