Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

529 results · Clear filters · Feed

  • Critical max 10.0
    USN-7835-3 59 CVEs 1 exploited

    linux-gcp-6.8, linux-gke, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Oct 22, 2025
  • Critical max 10.0
    USN-7834-1 172 CVEs 1 exploited

    linux-azure, linux-azure-6.14, linux-azure-nvidia-6.14 vulnerabilities

    Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local …

    first Oct 22, 2025
  • Critical max 10.0
    USN-7833-4 173 CVEs 1 exploited

    linux-gcp-6.14 vulnerabilities

    Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local …

    first Oct 31, 2025
  • High max 8.6
    USN-7922-3 15 CVEs 1 exploited

    linux-oracle-5.4 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - InfiniBand drivers; - Media drivers; - N…

    first Dec 19, 2025
  • Critical max 10.0
    USN-7833-3 173 CVEs 1 exploited

    linux-aws-6.14 vulnerabilities

    Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local …

    first Oct 24, 2025
  • Critical max 9.8
    USN-7775-3 143 CVEs 1 exploited

    linux-azure-5.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Oct 1, 2025
  • Critical max 9.8
    USN-7775-1 143 CVEs 1 exploited

    linux-azure-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Sep 25, 2025
  • Critical max 10.0
    USN-7887-2 60 CVEs 1 exploited

    linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Nov 25, 2025
  • Critical max 10.0
    USN-7887-1 60 CVEs 1 exploited

    linux-raspi-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Nov 24, 2025
  • Critical max 10.0
    USN-7835-6 59 CVEs 1 exploited

    linux-aws-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Nov 12, 2025
  • Critical max 10.0
    USN-7835-5 59 CVEs 1 exploited

    linux-oracle-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Nov 6, 2025
  • Critical max 10.0
    USN-7835-4 59 CVEs 1 exploited

    linux-hwe-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Oct 31, 2025
  • Critical max 10.0
    USN-7835-2 59 CVEs 1 exploited

    linux-realtime, linux-realtime-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Oct 22, 2025
  • Critical max 9.8
    USN-7875-1 28 CVEs 2 exploited

    linux-oracle vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Nov 19, 2025
  • Critical max 9.8
    USN-7865-1 22 CVEs 2 exploited

    linux-fips vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Nov 10, 2025
  • Critical max 9.8
    USN-7854-1 18 CVEs 2 exploited

    linux-kvm vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Oct 30, 2025
  • Critical max 9.8
    USN-7774-4 142 CVEs 1 exploited

    linux-kvm vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Oct 1, 2025
  • Critical max 9.8
    USN-7775-2 143 CVEs 1 exploited

    linux-azure vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Sep 26, 2025
  • Critical max 9.8
    USN-7789-1 184 CVEs 1 exploited

    linux-oracle-6.14 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer…

    first Oct 1, 2025
  • Critical max 9.8
    USN-7774-5 142 CVEs 1 exploited

    linux-nvidia-tegra-igx vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Oct 6, 2025
  • Critical max 9.8
    USN-7769-2 183 CVEs 1 exploited

    linux-realtime-6.14 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer…

    first Sep 24, 2025
  • Critical max 9.8
    USN-7771-1 182 CVEs 1 exploited

    linux-oem-6.14 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer…

    first Sep 24, 2025
  • Critical max 9.8
    USN-7769-1 183 CVEs 1 exploited

    linux, linux-aws, linux-gcp, linux-gcp-6.14, linux-oracle, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer…

    first Dec 3, 2025
  • Critical max 9.8
    USN-7774-3 142 CVEs 1 exploited

    linux-intel-iot-realtime, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Sep 25, 2025
  • Critical max 9.8
    USN-7776-1 146 CVEs 1 exploited

    linux-oracle-5.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Sep 25, 2025
  • Critical max 9.8
    USN-7769-3 184 CVEs 1 exploited

    linux-aws-6.14, linux-hwe-6.14 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer…

    first Sep 26, 2025
  • High max 7.8
    USN-7627-1 12 CVEs 1 exploited

    linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - Block layer subsystem; - ACPI drivers; - NILFS2 file …

    first Jul 8, 2025
  • High max 7.8
    USN-7627-2 12 CVEs 1 exploited

    linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - Block layer subsystem; - ACPI drivers; - NILFS2 file …

    first Jul 8, 2025
  • High max 7.8
    USN-7607-1 10 CVEs 1 exploited

    linux, linux-aws, linux-lts-xenial vulnerabilities

    It was discovered that a use-after-free vulnerability existed in the Bluetooth stack in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3640) Several security issues w…

    first Jul 1, 2025
  • High max 7.8
    USN-7607-2 10 CVEs 1 exploited

    linux-fips vulnerabilities

    It was discovered that a use-after-free vulnerability existed in the Bluetooth stack in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3640) Several security issues w…

    first Jul 1, 2025
  • High max 7.8
    USN-7607-3 10 CVEs 1 exploited

    linux-kvm vulnerabilities

    It was discovered that a use-after-free vulnerability existed in the Bluetooth stack in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3640) Several security issues w…

    first Jul 8, 2025
  • Critical max 9.2
    USN-8958-1 3 CVEs 1 exploited

    dotnet8, dotnet10, dotnet11 vulnerabilities

    It was discovered that the .NET Blazor WebAssembly debug proxy did not properly escape certain values. An attacker could possibly use this issue to execute arbitrary code. The fix for this CVE was originally released via USN-8942-1, but it was found to be inc…

    first Oct 29, 2026
  • High max 7.8
    USN-7874-1 8 CVEs 1 exploited

    linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Nov 19, 2025
  • High max 7.8
    USN-7861-1 4 CVEs 1 exploited

    linux, linux-aws, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-lowlatency vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Nov 6, 2025
  • High max 7.8
    USN-7874-3 8 CVEs 1 exploited

    linux-iot vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Dec 4, 2025
  • High max 7.8
    USN-7864-1 5 CVEs 1 exploited

    linux-gcp, linux-gcp-6.8, linux-gke vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Nov 7, 2025
  • High max 8.2
    USN-7863-1 12 CVEs 2 exploited

    linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Nov 6, 2025
  • High max 7.8
    USN-7861-5 4 CVEs 1 exploited

    linux-raspi, linux-raspi-realtime, linux-xilinx vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Dec 3, 2025
  • High max 7.8
    USN-7874-2 8 CVEs 1 exploited

    linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Nov 19, 2025
  • High max 8.2
    USN-7853-3 11 CVEs 2 exploited

    linux-azure, linux-azure-4.15 vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Nov 7, 2025