2,448 results · Clear filters · Feed
-
High max 7.8USN-7235-2 3 CVEs
linux-azure-5.15 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; - VMware vSockets driver; (CVE-2024-531…
first Jan 30, 2025 -
High max 7.8USN-7234-5 5 CVEs
linux-aws-5.4 linux-raspi-5.4 vulnerabilities
Ye Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or po…
first Feb 25, 2025 -
High max 7.8USN-7234-4 5 CVEs
linux-aws vulnerabilities
Ye Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or po…
first Feb 12, 2025 -
High max 7.8USN-7234-3 5 CVEs
linux-azure, linux-azure-5.4 vulnerabilities
Ye Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or po…
first Feb 4, 2025 -
High max 7.8USN-7234-2 5 CVEs
linux-hwe-5.4 vulnerabilities
Ye Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or po…
first Jan 30, 2025 -
High max 7.8USN-7233-3 15 CVEs
linux-azure vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Multiple devices driver; - Network drivers; - Mellanox network drivers; - S/3…
first Feb 3, 2025 -
High max 7.8USN-7233-2 15 CVEs
linux-azure, linux-azure-4.15 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Multiple devices driver; - Network drivers; - Mellanox network drivers; - S/3…
first Jan 30, 2025 -
High max 7.8USN-7232-1 1 CVE
linux vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Netfilter; (CVE-2024-53141)
first Jan 28, 2025 -
High max 8.8USN-7195-1 39 CVEs
linux-azure vulnerabilities
Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-3809…
first Jan 9, 2025 -
High max 8.8USN-7179-4 14 CVEs
linux-xilinx-zynqmp vulnerabilities
Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-202…
first Jan 27, 2025 -
High max 8.8USN-7179-3 14 CVEs
linux-gke vulnerabilities
Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-202…
first Jan 7, 2025 -
High max 8.8USN-7173-3 16 CVEs
linux-raspi-5.4 vulnerabilities
Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-3809…
first Jan 15, 2025 -
High max 7.8USN-7170-1 29 CVEs
linux-oem-6.11 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Ext4 file system; - Network traffic control; - VMware vSockets…
first Dec 17, 2024 -
High max 7.8USN-7167-2 3 CVEs
linux-hwe-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ext4 file system; - Network traffic control; - VMware vSockets driver; (CVE-2…
first Jan 7, 2025 -
High max 7.8USN-7163-1 1 CVE
linux vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Network traffic control;
first Dec 16, 2024 -
High max 7.8USN-7159-5 23 CVEs
linux-raspi-5.4 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - S390 architecture; - x86 architec…
first Jan 6, 2025 -
High max 7.8USN-7159-4 23 CVEs
linux-iot vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - S390 architecture; - x86 architec…
first Dec 20, 2024 -
High max 7.8USN-7159-2 23 CVEs
linux-aws, linux-aws-5.4 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - S390 architecture; - x86 architec…
first Dec 17, 2024 -
High max 7.8USN-7120-3 2 CVEs
linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - Network traffic control; (CVE-2024-46800, CVE-…
first Nov 21, 2024 -
High max 7.8USN-7120-2 2 CVEs
linux-aws-6.8, linux-azure, linux-azure-6.8, linux-oracle-6.8, vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - Network traffic control; (CVE-2024-46800, CVE-…
first Nov 20, 2024 -
High max 7.8USN-7076-1 4 CVEs
linux-azure, linux-azure-5.15 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Microsoft Azure Network Adapter (MANA) driver; - Watchdog drivers; - Netfilte…
first Oct 17, 2024 -
High max 7.8USN-7072-2 3 CVEs
linux-gke vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Watchdog drivers; - Netfilter; - Network traffic control; (CVE-2024-38630, CV…
first Oct 21, 2024 -
High max 7.8USN-7071-2 1 CVE
linux-gke vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Network traffic control; (CVE-2024-45016)
first Nov 14, 2024 -
High max 8.1USN-6866-3 12 CVEs
linux-azure vulnerabilities
It was discovered that the ext4 file system implementation in the Linux kernel did not properly validate data state on write operations. An attacker could use this to construct a malicious ext4 file system image that, when mounted, could cause a denial of ser…
first Jul 10, 2024 -
High max 7.8USN-6031-1 10 CVEs
linux-oem-5.17 vulnerabilities
It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-1…
first Apr 19, 2023 -
High max 7.8USN-7074-1 2 CVEs
linux-azure vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Microsoft Azure Network Adapter (MANA) driver; - Network traffic control; (CV…
first Oct 17, 2024 -
High max 7.8USN-7073-2 4 CVEs
linux-azure, linux-azure-5.4 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Watchdog drivers; - Netfilter; - Memory management; - Network traffic control…
first Oct 17, 2024 -
High max 7.8USN-6868-2 3 CVEs
linux-aws-5.4 vulnerabilities
Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could pote…
first Jul 10, 2024 -
High max 8.1USN-6866-2 12 CVEs
linux-azure, linux-azure-4.15 vulnerabilities
It was discovered that the ext4 file system implementation in the Linux kernel did not properly validate data state on write operations. An attacker could use this to construct a malicious ext4 file system image that, when mounted, could cause a denial of ser…
first Jul 4, 2024 -
High max 8.8USN-7684-1 5 CVEs
linux, linux-aws, linux-kvm vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - TTY drivers; - Ext4 file system; - Bluetooth subsystem; - U…
first Jul 31, 2025 -
High max 7.8USN-6865-1 9 CVEs
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
It was discovered that the ext4 file system implementation in the Linux kernel did not properly validate data state on write operations. An attacker could use this to construct a malicious ext4 file system image that, when mounted, could cause a denial of ser…
first Jul 3, 2024 -
High max 7.5USN-8936-1 10 CVEs
php8.5, php8.3, php8.1, php7.4, php7.2, php7.0, php5 vulnerabilities
It was discovered that PHP did not properly validate the size of MySQL server packets in the mysqlnd driver. A malicious server could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue was only addressed in Ubuntu 20.0…
first Oct 19, 2026 -
High max 8.1USN-8411-1 6 CVEs
node-lodash vulnerabilities
It was discovered that Lodash was vulnerable to a prototype pollution issue in the zipObjectDeep function. An attacker could possibly use this issue to modify application behavior. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-8203…
first Jun 9, 2026 -
High max 7.1USN-8221-1 1 CVE
wheel vulnerability
It was discovered that wheel did not correctly handle certain file paths. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to execute arbitrary code.
first Apr 29, 2026 -
High max 8.8USN-8105-1 32 CVEs
freerdp3 vulnerabilities
It was discovered that FreeRDP incorrectly handled certain RDP packets. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 18, 2026 -
High max 8.8USN-8059-1 2 CVEs
linux, linux-gkeop, linux-hwe-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; (CVE-2025-22037, CVE-2025-37899)
first Feb 24, 2026 -
High max 8.7USN-8042-1 12 CVEs
freerdp2, freerdp3 vulnerabilities
It was discovered that FreeRDP incorrectly handled memory under certain circumstances, which could lead to a NULL pointer dereference. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-23948) It was discovered that FreeRDP did …
first Feb 16, 2026 -
High max 8.2USN-8087-1 1 CVE
python-cryptography vulnerability
It was discovered that python-cryptography incorrectly handled subgroup validation for SECT curves. A remote attacker could use this issue to perform a subgroup attack and possibly recover the least significant bits of private keys.
first Mar 12, 2026 -
High max 8.2USN-8087-3 1 CVE
python-cryptography vulnerability
USN-8087-1 fixed a vulnerability in python-cryptography. This update provides the corresponding update to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that python-cryptography incorrectly handled subgr…
first Apr 28, 2026 -
High max 8.8USN-8059-9 2 CVEs
linux-azure-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; (CVE-2025-22037, CVE-2025-37899)
first Mar 24, 2026