Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

All Critical High Medium Low With exploited CVEs

2,451 results · Clear filters · Feed

  • High max 7.8
    USN-7611-2 5 CVEs

    linux-azure vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; (CVE-2025-38000, CVE-2025-37890, CVE-20…

    first Jul 8, 2025
  • High max 7.8
    USN-7611-1 5 CVEs

    linux, linux-gcp, linux-raspi, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; (CVE-2025-38000, CVE-2025-37890, CVE-20…

    first Jul 2, 2025
  • High max 8.6
    USN-7673-1 4 CVEs

    openjdk-21-crac vulnerabilities

    It was discovered that the 2D component of CRaC JDK 21 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-30749, CVE-2025-50106) VMashroor Has…

    first Jul 28, 2025
  • High max 7.2
    USN-7560-1 1 CVE

    amd64-microcode vulnerability

    Josh Eads, Kristoffer Janke, Eduardo Nava, Tavis Ormandy and Matteo Rizzo discovered that AMD Microcode incorrectly verified signatures. An attacker with local administrator privilege could possibly use this issue to cause loss of confidentiality and integrit…

    first Jun 9, 2025
  • High max 7.4
    USN-7533-1 3 CVEs

    openjdk-17-crac vulnerabilities

    Alicja Kario discovered that the JSSE component of CRaC JDK 17 incorrectly handled RSA padding. An attacker could possibly use this issue to obtain sensitive information. (CVE-2025-21587) It was discovered that the Compiler component of CRaC JDK 17 incorrectl…

    first May 26, 2025
  • High max 7.5
    USN-7366-2 3 CVEs

    ruby-rack vulnerabilities

    USN-7366-1 fixed vulnerabilities in Rack. This update provides the corresponding updates for Ubuntu 25.04. Original advisory details: Nhật Thái Đỗ discovered that Rack incorrectly handled certain usernames. A remote attacker could possibly use this issue to p…

    first Jul 23, 2025
  • High max 7.8
    USN-7611-3 5 CVEs

    linux-aws vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; (CVE-2025-38000, CVE-2025-37890, CVE-20…

    first Jul 17, 2025
  • High max 7.8
    USN-7681-2 1 CVE

    linux-oracle vulnerability

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network traffic control; (CVE-2025-38083)

    first Jul 31, 2025
  • High max 7.5
    USN-7641-1 1 CVE

    bind9 vulnerability

    It was discovered that Bind incorrectly handled configurations where the stale-answer-client-timeout option is set to 0. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service.

    first Jul 16, 2025
  • High max 7.5
    USN-7526-1 1 CVE

    bind9 vulnerability

    It was discovered that Bind incorrectly handled certain DNS messages with invalid TSIG. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service.

    first May 21, 2025
  • High max 8.3
    USN-7477-1 1 CVE

    c-ares vulnerability

    It was discovered that c-ares incorrectly handled re-enqueuing certain queries. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service.

    first May 5, 2025