Skip to content
OpenAdvisories
High 1 exploited CVE USN-7325-1 2 CVEs

linux-aws, linux-aws-6.8, linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities

Published Mar 5, 2025 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

Attila Szász discovered that the HFS+ file system implementation in the
Linux Kernel contained a heap overflow vulnerability. An attacker could use
a specially crafted file system image that, when mounted, could cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2025-0927)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Media drivers;
(CVE-2024-53104)

Fixed packages 5

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux-aws-6.8 6.8.0-1024.26~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle-6.8 6.8.0-1021.22~22.04.1
Ubuntu · 24.04 LTS 24.04:LTS linux-aws 6.8.0-1024.26
Ubuntu · 24.04 LTS 24.04:LTS linux-oracle 6.8.0-1021.22
Ubuntu · 24.04 LTS 24.04:LTS linux-raspi 6.8.0-1020.24

Vulnerabilities 2

  • High 7.8
    CVE-2024-53104 Exploited Public exploit

    media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

    In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Feb 5, 2025
  • Unscored —
    CVE-2025-0927 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Filesystem bugs due to corrupt images are no…

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2024-53104
  • report
    https://ubuntu.com/security/CVE-2025-0927