Skip to content
OpenAdvisories
Critical LSN-0113-1 6 CVEs

Kernel Live Patch Security Notice

Published Jul 10, 2025 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

In the Linux kernel, the following vulnerability has been
resolved: smb: client: fix UAF in async decryption Doing an async
decryption (large read) crashes with a slab-use-after-free way down in the
crypto API.

In the Linux kernel, the following vulnerability has been
resolved: ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
After an insertion in TNC, the tree might split and cause a node to change
its `znode->parent`.

In the Linux kernel, the following vulnerability has been
resolved: drm/amdgpu: fix usage slab after free

In the Linux kernel, the following vulnerability has been
resolved: jfs: fix array-index-out-of-bounds in jfs_readdir The stbl might
contain some invalid values.

In the Linux kernel, the following vulnerability has been
resolved: drm/amd/display: Fix out-of-bounds access in
'dcn21_link_encoder_create' An issue was identified in the
dcn21_link_encoder_create function where an out-of-bounds access could
occur when the hpd_source index was used to reference the link_enc_hpd_regs
array.

In the Linux kernel, the following vulnerability has been
resolved: jffs2: Prevent rtime decompress memory corruption The rtime
decompression routine does not fully check bounds during the entirety of
the decompression pass and can corrupt memory outside the decompression
buffer if the compressed data is corrupted.

Fixed packages 40

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-lts-xenial 4.4.0-269.303~14.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux 4.4.0-269.303
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-aws 4.4.0-1182.197
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-aws-hwe 4.15.0-1181.194~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-azure 4.15.0-1189.204~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-gcp 4.15.0-1174.191~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-hwe 4.15.0-238.250~16.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux 4.15.0-238.250
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-aws 4.15.0-1181.194
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-azure-4.15 4.15.0-1189.204
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-gcp-4.15 4.15.0-1174.191
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-hwe-5.4 5.4.0-219.239~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-oracle 4.15.0-1143.154
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux 5.4.0-219.239
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-aws 5.4.0-1148.158
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-aws-5.15 5.15.0-1087.94~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-azure 5.4.0-1153.160
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-azure-5.15 5.15.0-1094.103~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gcp 5.4.0-1151.160
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gcp-5.15 5.15.0-1086.95~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gkeop —
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-hwe-5.15 5.15.0-143.153~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm 5.4.0-1094.99
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm-5.15 5.15.0-1079.82~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-143.153~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-oracle 5.4.0-1146.156
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-oracle-5.15 5.15.0-1084.90~20.04.1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux 5.15.0-143.153
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-aws 5.15.0-1087.94
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-azure 5.15.0-1092.101
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-gcp 5.15.0-1086.95
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-gke 5.15.0-1084.90
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-ibm 5.15.0-1079.82
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-oracle 5.15.0-1084.90
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS linux 6.8.0-58.60
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS linux-aws 6.8.0-1027.29
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS linux-azure 6.8.0-1027.32
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS linux-gcp 6.8.0-1028.30
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS linux-ibm 6.8.0-1024.24
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS linux-oracle 6.8.0-1024.25

Vulnerabilities 6

  • Critical 9.8
    CVE-2024-50047

    smb: client: fix UAF in async decryption

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in async decryption Doing an async decryption (large read) crashes with a slab-use-after-free way down in the crypto API. Reproducer: # mount.cifs -o ...,seal,esize=1 //s…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-53171

    ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit

    In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit After an insertion in TNC, the tree might split and cause a node to change its `znode->parent`. A further deletion of other n…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-56551

    drm/amdgpu: fix usage slab after free

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix usage slab after free [ +0.000021] BUG: KASAN: slab-use-after-free in drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched] [ +0.000027] Read of size 8 at addr ffff8881b8605f88 by ta…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-56596

    jfs: fix array-index-out-of-bounds in jfs_readdir

    In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in jfs_readdir The stbl might contain some invalid values. Added a check to return error code in that case.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-56608

    drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' An issue was identified in the dcn21_link_encoder_create function where an out-of-bounds access could occur when the h…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-57850

    jffs2: Prevent rtime decompress memory corruption

    In the Linux kernel, the following vulnerability has been resolved: jffs2: Prevent rtime decompress memory corruption The rtime decompression routine does not fully check bounds during the entirety of the decompression pass and can corrupt memory outside the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2024-50047
  • report
    https://ubuntu.com/security/CVE-2024-53171
  • report
    https://ubuntu.com/security/CVE-2024-56551
  • report
    https://ubuntu.com/security/CVE-2024-56596
  • report
    https://ubuntu.com/security/CVE-2024-56608
  • report
    https://ubuntu.com/security/CVE-2024-57850