Skip to content
OpenAdvisories
High 1 exploited CVE USN-7326-1 4 CVEs

linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop vulnerabilities

Published Mar 5, 2025 · Updated Oct 7, 2026

Ecosystem: Ubuntu

Summary

Attila Szász discovered that the HFS+ file system implementation in the
Linux Kernel contained a heap overflow vulnerability. An attacker could use
a specially crafted file system image that, when mounted, could cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2025-0927)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Media drivers;
- Network drivers;
(CVE-2024-50274, CVE-2024-53104, CVE-2024-53064)

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux-gcp-6.8 6.8.0-1025.27~22.04.1
Ubuntu · 24.04 LTS 24.04:LTS linux-gcp 6.8.0-1025.27
Ubuntu · 24.04 LTS 24.04:LTS linux-gke 6.8.0-1020.24
Ubuntu · 24.04 LTS 24.04:LTS linux-gkeop 6.8.0-1007.9

Vulnerabilities 4

  • High 7.8
    CVE-2024-53104 Exploited Public exploit

    media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

    In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Feb 5, 2025
  • High 7.8
    CVE-2024-50274

    idpf: avoid vport access in idpf_get_link_ksettings

    In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpf_get_link_ksettings When the device control plane is removed or the platform running device control plane is rebooted, a reset is detected on the driver. On dr…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-53064

    idpf: fix idpf_vc_core_init error path

    In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpf_vc_core_init error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits fo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-0927 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Filesystem bugs due to corrupt images are no…

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2024-50274
  • report
    https://ubuntu.com/security/CVE-2024-53064
  • report
    https://ubuntu.com/security/CVE-2024-53104
  • report
    https://ubuntu.com/security/CVE-2025-0927