Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

1,460 results · Clear filters · Feed

  • Critical max 9.8
    USN-6819-1 149 CVEs

    linux-azure, linux-azure-6.5, linux-starfive, linux-starfive-6.5 vulnerabilities

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service (system crash). (CVE-2023-6356…

    first Jun 7, 2024
  • Critical max 9.8
    USN-6818-4 150 CVEs

    linux-hwe-6.5 vulnerabilities

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service (system crash). (CVE-2023-6356…

    first Jun 18, 2024
  • Critical max 9.8
    USN-8095-1 423 CVEs

    linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 16, 2026
  • Critical max 9.8
    USN-7909-1 178 CVEs

    linux, linux-aws, linux-aws-5.15, linux-gcp-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-oracle-5.15, linux-xilinx-zynqmp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC arch…

    first Dec 4, 2025
  • Critical max 10.0
    USN-8028-5 753 CVEs

    linux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 17, 2026
  • Critical max 9.8
    USN-7774-1 142 CVEs 1 exploited

    linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi, linux-xilinx-zynqmp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Dec 3, 2025
  • Critical max 9.8
    USN-8095-2 423 CVEs

    linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 16, 2026
  • Critical max 10.0
    USN-8126-1 1179 CVEs

    linux-azure-6.8 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 25, 2026
  • Critical max 10.0
    USN-8028-8 753 CVEs

    linux-ibm, linux-ibm-6.8 vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 24, 2026
  • Critical max 10.0
    USN-8028-6 753 CVEs

    linux-hwe-6.8, linux-lowlatency-hwe-6.8 vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 19, 2026
  • Critical max 9.8
    USN-8095-5 423 CVEs

    linux-raspi, linux-raspi-realtime vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Apr 1, 2026
  • Critical max 10.0
    USN-8052-1 753 CVEs

    linux-lowlatency vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 19, 2026
  • Critical max 10.0
    USN-8052-2 753 CVEs

    linux-xilinx vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 24, 2026
  • Critical max 9.8
    USN-8125-1 426 CVEs

    linux-azure vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 25, 2026
  • Critical max 10.0
    USN-8074-2 753 CVEs

    linux-azure-fips vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Mar 4, 2026
  • Critical max 10.0
    USN-8074-1 753 CVEs

    linux-azure vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Mar 4, 2026
  • Critical max 9.8
    USN-8095-4 423 CVEs

    linux-aws-6.8 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 23, 2026
  • Critical max 9.1
    USN-8112-1 10 CVEs

    linux, linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 20, 2026
  • Critical max 9.8
    USN-8029-2 367 CVEs

    linux-aws, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC ar…

    first Feb 17, 2026
  • Critical max 9.1
    USN-8112-5 10 CVEs

    linux-azure vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 24, 2026
  • Critical max 9.1
    USN-8112-2 10 CVEs

    linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 20, 2026
  • Critical max 9.8
    USN-8107-1 8 CVEs

    linux-aws-fips vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 20, 2026
  • Critical max 9.8
    USN-8098-9 8 CVEs

    linux-ibm-5.4 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 27, 2026
  • Critical max 9.8
    USN-8098-8 8 CVEs

    linux-azure-fips vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 25, 2026
  • Critical max 9.1
    USN-8112-4 10 CVEs

    linux-azure-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 24, 2026
  • Critical max 9.1
    USN-8112-3 10 CVEs

    linux-azure, linux-azure-4.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 24, 2026
  • Critical max 9.8
    USN-8048-1 366 CVEs

    linux-oem-6.17 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC ar…

    first Feb 17, 2026
  • Critical max 9.8
    USN-8098-7 8 CVEs

    linux-azure vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 25, 2026
  • Critical max 9.8
    USN-8098-6 8 CVEs

    linux-fips, linux-gcp-fips vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 24, 2026
  • Critical max 9.8
    USN-8098-3 8 CVEs

    linux-aws, linux-aws-5.4, linux-gcp-5.4, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 18, 2026
  • Critical max 9.8
    USN-8029-3 367 CVEs

    linux-azure vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC ar…

    first Feb 24, 2026
  • Critical max 9.8
    USN-8098-4 8 CVEs

    linux-hwe-5.4, linux-ibm vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 24, 2026
  • Critical max 9.8
    USN-8098-2 8 CVEs

    linux-gcp vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 17, 2026
  • Critical max 9.8
    USN-8098-1 8 CVEs

    linux vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 16, 2026
  • Critical max 9.8
    USN-8030-1 366 CVEs

    linux-gcp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC ar…

    first Feb 12, 2026
  • Critical max 9.1
    USN-8070-1 9 CVEs

    linux, linux-aws, linux-kvm vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 4, 2026
  • Critical max 9.8
    USN-8015-1 3 CVEs

    linux, linux-gke, linux-gkeop, linux-hwe-6.8, linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; - io_uring subsystem; (CVE-2025…

    first Feb 4, 2026
  • Critical max 9.8
    USN-8016-1 4 CVEs

    linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SPI subsystem; - SMB network file system; - io_uring sub…

    first Feb 4, 2026
  • Critical max 9.8
    USN-8015-3 3 CVEs

    linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; - io_uring subsystem; (CVE-2025…

    first Feb 6, 2026
  • Critical max 9.8
    USN-8013-1 2 CVEs

    linux, linux-aws, linux-azure, linux-azure-5.15, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; (CVE-2025-38561, CVE-2025-40019)

    first Feb 4, 2026