Skip to content
OpenAdvisories
High USN-7683-2 2 CVEs

linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

Published Jul 31, 2025 · Updated Nov 3, 2026

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- TTY drivers;
- Network traffic control;
(CVE-2025-38083, CVE-2024-50073)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-aws-fips 5.15.0-1089.96+fips1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-fips 5.15.0-145.158+fips1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-gcp-fips 5.15.0-1088.97+fips1

Vulnerabilities 2

  • High 7.8

    tty: n_gsm: Fix use-after-free in gsm_cleanup_mux

    In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux BUG: KASAN: slab-use-after-free in gsm_cleanup_mux+0x77b/0x7b0 drivers/tty/n_gsm.c:3160 [n_gsm] Read of size 8 at addr ffff88815fe99c00 by ta…

  • High 7.8

    net_sched: prio: fix a race in prio_tune()

    In the Linux kernel, the following vulnerability has been resolved: net_sched: prio: fix a race in prio_tune() Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU 1 [1]: lock roo…

References

  • report
    https://ubuntu.com/security/CVE-2024-50073
  • report
    https://ubuntu.com/security/CVE-2025-38083