Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- Padata parallel execution mechanism;
- Netfilter;
(CVE-2022-49698, CVE-2025-21726, CVE-2025-40019)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro FIPS-updates 20.04 LTS Pro:FIPS-updates:20.04:LTS | linux-aws-fips | 5.4.0-1154.164+fips1 |
| Ubuntu · Pro FIPS-updates 20.04 LTS Pro:FIPS-updates:20.04:LTS | linux-fips | 5.4.0-1128.138 |
| Ubuntu · Pro FIPS-updates 20.04 LTS Pro:FIPS-updates:20.04:LTS | linux-gcp-fips | 5.4.0-1157.166+fips1 |
Vulnerabilities 3
-
High 7.8
padata: avoid UAF for reorder_work
In the Linux kernel, the following vulnerability has been resolved: padata: avoid UAF for reorder_work Although the previous patch can avoid ps and ps UAF for _do_serial, it can not avoid potential UAF issue for reorder_work. This issue can happen just as bel…
-
Unscored —
netfilter: use get_random_u32 instead of prandom
In the Linux kernel, the following vulnerability has been resolved: netfilter: use get_random_u32 instead of prandom bh might occur while updating per-cpu rnd_state from user context, ie. local_out path. BUG: using smp_processor_id() in preemptible [00000000]…
-
Unscored —CVE-2025-40019 Public exploit
crypto: essiv - Check ssize for decryption and in-place encryption
In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.