Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

2,446 results · Clear filters · Feed

  • High max 8.8
    USN-8145-3 5 CVEs

    linux-gcp, linux-gcp-4.15, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; …

    first Apr 6, 2026
  • High max 8.8
    USN-8143-1 7 CVEs

    linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - GPU drivers; - BTRFS file system; - GFS2 file system; - …

    first Apr 1, 2026
  • High max 7.8
    USN-8149-1 3 CVEs

    linux, linux-aws, linux-aws-6.17, linux-gcp, linux-gcp-6.17, linux-hwe-6.17, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 2, 2026
  • High max 7.8
    USN-8148-3 3 CVEs

    linux-realtime, linux-realtime-6.8, linux-raspi-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 2, 2026
  • High max 8.8
    USN-8145-2 5 CVEs

    linux-fips, linux-aws-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; …

    first Apr 2, 2026
  • High max 7.8
    USN-8149-2 3 CVEs

    linux-oracle, linux-oracle-6.17, linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 9, 2026
  • High max 7.8
    USN-8148-5 3 CVEs

    linux-aws-6.8, linux-gcp-6.8, linux-hwe-6.8, linux-ibm-6.8, linux-lowlatency-hwe-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 9, 2026
  • High max 7.8
    USN-8148-2 3 CVEs

    linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 2, 2026
  • High max 8.8
    USN-8145-5 5 CVEs

    linux-azure, linux-azure-4.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; …

    first Apr 15, 2026
  • High max 7.8
    USN-8148-7 3 CVEs

    linux-nvidia-lowlatency, linux-nvidia-tegra vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 16, 2026
  • High max 8.8
    USN-8145-4 5 CVEs

    linux-hwe vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; …

    first Apr 9, 2026
  • High max 8.8
    USN-8143-2 7 CVEs

    linux-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - GPU drivers; - BTRFS file system; - GFS2 file system; - …

    first Apr 2, 2026
  • High max 8.6
    USN-8975-1 10 CVEs

    libsoup2.4, libsoup3 vulnerabilities

    It was discovered that libsoup incorrectly handled certain WebSocket frames. A remote attacker could possibly use this issue to cause an application to crash or expose sensitive information. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu …

    first Nov 3, 2026
  • High max 7.4
    USN-8987-1 2 CVEs 1 exploited

    libuser vulnerabilities

    It was discovered that libuser did not properly validate the GECOS field when changing user information. A local attacker could possibly use this issue to corrupt the passwd file, resulting in a denial of service. (CVE-2015-3245) It was discovered that libuse…

    first Nov 3, 2026
  • High max 7.8
    USN-8981-1 1 CVE

    e17 vulnerability

    It was discovered that the enlightenment_sys helper in Enlightenment incorrectly handled certain pathnames. A local attacker could possibly use this issue to gain administrator privileges.

    first Nov 3, 2026
  • High max 7.5
    USN-8978-1 1 CVE

    cakephp vulnerability

    Dawid Golunski discovered that CakePHP incorrectly trusted the CLIENT-IP HTTP header when determining the client IP address. A remote attacker could possibly use this issue to spoof their IP address.

    first Nov 3, 2026
  • High max 8.3
    USN-8993-1 1 CVE

    sogo vulnerability

    It was discovered that SOGo used the client-supplied Origin header when constructing password reset links. A remote attacker could possibly use this issue to obtain password reset tokens and take over user accounts.

    first Nov 3, 2026
  • High max 8.4
    USN-8994-1 9 CVEs

    vips vulnerabilities

    It was discovered that libvips incorrectly handled certain PDF files with a page that defines a width but not a height. An attacker could possibly use this issue to cause libvips to crash, resulting in a denial of service, or obtain sensitive information. Thi…

    first Nov 3, 2026
  • High max 8.4
    USN-8980-1 3 CVEs

    dmitry vulnerabilities

    It was discovered that DMitry incorrectly handled long arguments, leading to a stack-based buffer overflow. An attacker could possibly use this issue to cause DMitry to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-793…

    first Nov 3, 2026
  • High max 7.5
    USN-8990-1 1 CVE

    ruby-sprockets vulnerability

    It was discovered that Sprockets incorrectly handled certain specially crafted requests when the Sprockets server was used in production. A remote attacker could possibly use this issue to access files outside of the application's root directory.

    first Nov 3, 2026
  • High max 7.5
    USN-8972-1 2 CVEs

    haproxy vulnerabilities

    It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service. (CVE-2026-110353) It was discovered that HAPr…

    first Nov 3, 2026
  • High max 7.5
    USN-8989-1 13 CVEs

    ruby-rack vulnerabilities

    Andrew Lacambra discovered that Rack did not properly parse certain regular expressions. An attacker could possibly use this issue to bypass network security filters. (CVE-2026-26961) William T. Nelson discovered that Rack did not handle multipart headers cor…

    first Nov 3, 2026
  • High max 8.2
    USN-8974-1 8 CVEs

    pcre2 vulnerabilities

    It was discovered that PCRE2 did not correctly manage memory when processing certain patterns. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS…

    first Nov 3, 2026
  • High max 8.1
    USN-8969-1 18 CVEs

    bind9 vulnerabilities

    It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory, leading to a denial of service. T…

  • High max 7.8
    USN-7554-3 11 CVEs

    linux-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - Clock framework and drivers; - GPU drivers; - Parpor…

    first Jun 4, 2025
  • High max 7.8
    USN-7554-2 11 CVEs

    linux-aws, linux-lts-xenial vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - Clock framework and drivers; - GPU drivers; - Parpor…

    first Jun 4, 2025
  • High max 7.8
    USN-7553-1 9 CVEs

    linux, linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file sy…

    first Jun 4, 2025
  • High max 7.8
    USN-7550-7 3 CVEs

    linux-nvidia-tegra-igx vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Sun RPC protocol; (CVE-2024-56551, CVE-2024-56608, CVE-2024-53…

    first Jun 13, 2025
  • High max 7.8
    USN-7550-4 3 CVEs

    linux-azure-fde vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Sun RPC protocol; (CVE-2024-53168, CVE-2024-56551, CVE-2024-56…

    first Jun 4, 2025
  • High max 7.8
    USN-7550-6 3 CVEs

    linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Sun RPC protocol; (CVE-2024-56608, CVE-2024-53168, CVE-2024-56…

    first Jun 9, 2025
  • High max 7.3
    USN-8815-1 4 CVEs

    libass vulnerabilities

    It was discovered that libass incorrectly handled parsing operations for specific nested character strings. An attacker could use this issue to cause libass to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affect…

    first Sep 24, 2026
  • High max 7.8
    USN-7553-5 9 CVEs

    linux-azure vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file sy…

    first Jun 9, 2025
  • High max 7.8
    USN-7554-1 11 CVEs

    linux, linux-aws, linux-kvm vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - Clock framework and drivers; - GPU drivers; - Parpor…

    first Jun 4, 2025
  • High max 7.8
    USN-7553-4 9 CVEs

    linux-azure, linux-azure-4.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file sy…

    first Jun 9, 2025
  • High max 7.8
    USN-7553-6 9 CVEs

    linux-azure-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file sy…

    first Jun 9, 2025
  • High max 7.8
    USN-7553-2 9 CVEs

    linux-aws-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file sy…

    first Jun 4, 2025
  • High max 7.8
    USN-7553-3 9 CVEs

    linux-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Clock framework and drivers; - GPU drivers; - Parport drivers; - Ext4 file sy…

    first Jun 6, 2025
  • High max 7.8
    USN-7550-5 3 CVEs

    linux-nvidia vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Sun RPC protocol; (CVE-2024-56608, CVE-2024-56551, CVE-2024-53…

    first Jun 5, 2025
  • High max 7.8
    USN-7550-3 3 CVEs

    linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Sun RPC protocol; (CVE-2024-53168, CVE-2024-56551, CVE-2024-56…

    first Jun 3, 2025
  • High max 7.8
    USN-7550-2 3 CVEs

    linux-intel-iot-realtime, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Sun RPC protocol; (CVE-2024-56608, CVE-2024-56551, CVE-2024-53…

    first Jun 3, 2025