Skip to content
OpenAdvisories
High USN-7754-1 3 CVEs

linux, linux-aws, linux-aws-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

Published Sep 17, 2025 · Updated Nov 3, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network traffic control;
(CVE-2025-38350, CVE-2025-37752, CVE-2024-57996)

Fixed packages 14

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-aws-5.4 5.4.0-1150.160~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-gcp-5.4 5.4.0-1153.162~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-hwe-5.4 5.4.0-221.241~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-ibm-5.4 5.4.0-1096.101~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-raspi-5.4 5.4.0-1133.146~18.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux 5.4.0-221.241
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-aws 5.4.0-1150.160
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-bluefield 5.4.0-1109.116
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gcp 5.4.0-1153.162
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm 5.4.0-1096.101
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-iot 5.4.0-1054.57
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-kvm 5.4.0-1137.146
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-raspi 5.4.0-1133.146
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-xilinx-zynqmp 5.4.0-1068.72

Vulnerabilities 3

  • High 7.8
    CVE-2024-57996

    net_sched: sch_sfq: don't allow 1 packet limit

    In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does not work correctly with a limit of 1. iproute2 actually checks for this and this patch adds the check in kernel …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-37752

    net_sched: sch_sfq: move the limit validation

    In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-38350

    net/sched: Always pass notifications when child class becomes empty

    In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2024-57996
  • report
    https://ubuntu.com/security/CVE-2025-37752
  • report
    https://ubuntu.com/security/CVE-2025-38350