Skip to content
OpenAdvisories
Critical USN-8921-1 8 CVEs

linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-hwe, linux-kvm vulnerabilities

Published Oct 13, 2026 · Updated Oct 13, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- S390 architecture;
- IIO ADC drivers;
- Multiple devices driver;
- PCI subsystem;
- VFIO drivers;
- Network file system (NFS) server daemon;
- Overlay file system;
(CVE-2024-53194, CVE-2024-53214, CVE-2024-56570, CVE-2024-56779,
CVE-2024-57849, CVE-2024-57904, CVE-2024-57929, CVE-2025-21664)

Fixed packages 13

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-azure 4.15.0-1208.223~14.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-aws-hwe 4.15.0-1198.211~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-gcp 4.15.0-1191.208~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-hwe 4.15.0-261.273~16.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux 4.15.0-261.273
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-aws 4.15.0-1198.211
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-azure-4.15 4.15.0-1208.223
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-gcp-4.15 4.15.0-1191.208
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-kvm 4.15.0-1180.185
Ubuntu · Pro FIPS-updates 18.04 LTS Pro:FIPS-updates:18.04:LTS linux-aws-fips 4.15.0-2136.142
Ubuntu · Pro FIPS-updates 18.04 LTS Pro:FIPS-updates:18.04:LTS linux-azure-fips 4.15.0-2116.122
Ubuntu · Pro FIPS-updates 18.04 LTS Pro:FIPS-updates:18.04:LTS linux-fips 4.15.0-1153.165
Ubuntu · Pro FIPS-updates 18.04 LTS Pro:FIPS-updates:18.04:LTS linux-gcp-fips 4.15.0-2099.105

Vulnerabilities 8

  • Critical 9.8
    CVE-2024-56779

    nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur

    In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur The action force umount(umount -f) will attempt to kill all rpc_task even umount operation may ultimately fail if some files rem…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-53194

    PCI: Fix use-after-free of slot->bus on hot remove

    In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot->bus on hot remove Dennis reports a boot crash on recent Lenovo laptops with a USB4 dock. Since commit 0fc70886569c ("thunderbolt: Reset USB4 v2 host router") …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-53214

    vfio/pci: Properly hide first-in-list PCIe extended capability

    In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe extended capability There are cases where a PCIe extended capability should be hidden from the user. For example, an unknown capability (i.e., capab…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-57849

    s390/cpum_sf: Handle CPU hotplug remove during sampling

    In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHP_AP_PERF_S390_SF_ONLINE --> s390_pmu_sf_offline_cpu() .…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-57929

    dm array: fix releasing a faulty array block twice in dm_array_cursor_end

    In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dm_array_cursor_end When dm_bm_read_lock() fails due to locking or checksum errors, it releases the faulty block implicitly while leaving…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-21664

    dm thin: make get_first_thin use rcu-safe list first function

    In the Linux kernel, the following vulnerability has been resolved: dm thin: make get_first_thin use rcu-safe list first function The documentation in rculist.h explains the absence of list_empty_rcu() and cautions programmers against relying on a list_empty(…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-56570

    ovl: Filter invalid inodes with missing lookup function

    In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to prevent the processing of directory inodes that lack the lookup function. This is imp…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-57904

    iio: adc: at91: call input_free_device() on allocated iio_dev

    In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call input_free_device() on allocated iio_dev Current implementation of at91_ts_register() calls input_free_deivce() on st->ts_input, however, the err label can be reached bef…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2024-53194
  • report
    https://ubuntu.com/security/CVE-2024-53214
  • report
    https://ubuntu.com/security/CVE-2024-56570
  • report
    https://ubuntu.com/security/CVE-2024-56779
  • report
    https://ubuntu.com/security/CVE-2024-57849
  • report
    https://ubuntu.com/security/CVE-2024-57904
  • report
    https://ubuntu.com/security/CVE-2024-57929
  • report
    https://ubuntu.com/security/CVE-2025-21664