Summary
Attila Szász discovered that the HFS+ file system implementation in the
Linux Kernel contained a heap overflow vulnerability. An attacker could use
a specially crafted file system image that, when mounted, could cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2025-0927)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Block layer subsystem;
- Networking core;
(CVE-2024-56672, CVE-2024-56658)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.10 | linux-azure | 6.11.0-1010.10 |