Skip to content
OpenAdvisories
Unscored USN-7829-3 4 CVEs

linux-azure, linux-azure-5.15, linux-gcp-5.15 vulnerabilities

Published Oct 22, 2025 · Updated Nov 3, 2026

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- GPU drivers;
- Network drivers;
- Netlink;
(CVE-2024-26700, CVE-2025-38727, CVE-2023-52593, CVE-2024-26896)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux-azure 5.15.0-1098.107
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-azure-5.15 5.15.0-1098.107~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gcp-5.15 5.15.0-1095.104~20.04.1

Vulnerabilities 4

  • Unscored —

    wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()

    In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() Since 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()' should check the return value before examining skb data…

  • Unscored —

    drm/amd/display: Fix MST Null Ptr for RV

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix MST Null Ptr for RV The change try to fix below error specific to RV platform: BUG: kernel NULL pointer dereference, address: 0000000000000008 PGD 0 P4D 0 Oops: 0000 [#1]…

  • Unscored —

    wifi: wfx: fix memory leak when starting AP

    In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix memory leak when starting AP Kmemleak reported this error: unreferenced object 0xd73d1180 (size 184): comm "wpa_supplicant", pid 1559, jiffies 13006305 (age 964.245s) hex dump …

  • Unscored —

    netlink: avoid infinite retry looping in netlink_unicast()

    In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlink_unicast() netlink_attachskb() checks for the socket's read memory allocation constraints. Firstly, it has: rmem < READ_ONCE(sk->sk_rcvbuf) to …

References

  • report
    https://ubuntu.com/security/CVE-2023-52593
  • report
    https://ubuntu.com/security/CVE-2024-26700
  • report
    https://ubuntu.com/security/CVE-2024-26896
  • report
    https://ubuntu.com/security/CVE-2025-38727