Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- NTFS3 file system;
- Network traffic control;
(CVE-2024-27407, CVE-2024-57996, CVE-2025-37752, CVE-2025-38350)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS | linux-aws-fips | 5.15.0-1091.98+fips1 |
| Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS | linux-fips | 5.15.0-153.163+fips1 |
| Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS | linux-gcp-fips | 5.15.0-1091.100+fips1 |
Vulnerabilities 4
-
High 7.8
fs/ntfs3: Fixed overflow check in mi_enum_attr()
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fixed overflow check in mi_enum_attr()
-
High 7.8
net_sched: sch_sfq: don't allow 1 packet limit
In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does not work correctly with a limit of 1. iproute2 actually checks for this and this patch adds the check in kernel …
-
High 7.8
net_sched: sch_sfq: move the limit validation
In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are c…
-
High 7.8
net/sched: Always pass notifications when child class becomes empty
In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the …