Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

8,409 results · Feed

  • Critical max 9.8
    USN-6819-4 149 CVEs

    linux-oracle-6.5 vulnerabilities

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service (system crash). (CVE-2023-6356…

    first Jun 26, 2024
  • Critical max 9.8
    USN-6818-3 150 CVEs

    linux-nvidia-6.5 vulnerabilities

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service (system crash). (CVE-2023-6356…

    first Jun 14, 2024
  • Critical max 9.8
    USN-8033-6 114 CVEs

    linux-nvidia vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Nios II architecture; - Sun Sparc architecture; - User-Mode Linux (UML); - x8…

    first Feb 17, 2026
  • High max 7.8
    USN-7550-1 3 CVEs

    linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia-tegra, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Sun RPC protocol; (CVE-2024-56608, CVE-2024-56551, CVE-2024-53…

    first Jun 3, 2025
  • Critical max 9.8
    USN-6819-3 149 CVEs

    linux-oem-6.5 vulnerabilities

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service (system crash). (CVE-2023-6356…

    first Jun 12, 2024
  • Critical max 9.8
    USN-6818-1 150 CVEs

    linux, linux-gcp, linux-gcp-6.5, linux-lowlatency, linux-lowlatency-hwe-6.5, linux-raspi vulnerabilities

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service (system crash). (CVE-2023-6356…

    first Jun 7, 2024
  • Critical max 9.8
    USN-6819-1 149 CVEs

    linux-azure, linux-azure-6.5, linux-starfive, linux-starfive-6.5 vulnerabilities

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service (system crash). (CVE-2023-6356…

    first Jun 7, 2024
  • Critical max 9.8
    USN-6818-4 150 CVEs

    linux-hwe-6.5 vulnerabilities

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service (system crash). (CVE-2023-6356…

    first Jun 18, 2024
  • Critical max 9.8
    USN-8095-1 423 CVEs

    linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 16, 2026
  • Critical max 9.8
    USN-7909-1 178 CVEs

    linux, linux-aws, linux-aws-5.15, linux-gcp-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-oracle-5.15, linux-xilinx-zynqmp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC arch…

    first Dec 4, 2025
  • Critical max 10.0
    USN-8028-5 753 CVEs

    linux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 17, 2026
  • Critical max 9.8
    USN-7774-1 142 CVEs 1 exploited

    linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi, linux-xilinx-zynqmp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Dec 3, 2025
  • Critical max 9.8
    USN-8095-2 423 CVEs

    linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 16, 2026
  • Critical max 10.0
    USN-8126-1 1179 CVEs

    linux-azure-6.8 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 25, 2026
  • Critical max 10.0
    USN-8028-8 753 CVEs

    linux-ibm, linux-ibm-6.8 vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 24, 2026
  • Critical max 10.0
    USN-8028-6 753 CVEs

    linux-hwe-6.8, linux-lowlatency-hwe-6.8 vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 19, 2026
  • Critical max 9.8
    USN-8095-5 423 CVEs

    linux-raspi, linux-raspi-realtime vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Apr 1, 2026
  • Critical max 10.0
    USN-8052-1 753 CVEs

    linux-lowlatency vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 19, 2026
  • Critical max 10.0
    USN-8052-2 753 CVEs

    linux-xilinx vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 24, 2026
  • Critical max 9.8
    USN-8125-1 426 CVEs

    linux-azure vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 25, 2026
  • Critical max 10.0
    USN-8074-2 753 CVEs

    linux-azure-fips vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Mar 4, 2026
  • Critical max 10.0
    USN-8074-1 753 CVEs

    linux-azure vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Mar 4, 2026
  • Critical max 9.8
    USN-8095-4 423 CVEs

    linux-aws-6.8 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 23, 2026
  • Critical max 9.1
    USN-8112-1 10 CVEs

    linux, linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 20, 2026
  • Critical max 9.8
    USN-8029-2 367 CVEs

    linux-aws, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC ar…

    first Feb 17, 2026
  • Critical max 9.1
    USN-8112-5 10 CVEs

    linux-azure vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 24, 2026
  • Critical max 9.1
    USN-8112-2 10 CVEs

    linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 20, 2026
  • Critical max 9.8
    USN-8107-1 8 CVEs

    linux-aws-fips vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 20, 2026
  • Critical max 9.8
    USN-8098-9 8 CVEs

    linux-ibm-5.4 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 27, 2026
  • Critical max 9.8
    USN-8098-8 8 CVEs

    linux-azure-fips vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 25, 2026
  • Critical max 9.1
    USN-8112-4 10 CVEs

    linux-azure-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 24, 2026
  • Critical max 9.1
    USN-8112-3 10 CVEs

    linux-azure, linux-azure-4.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 24, 2026
  • Critical max 9.8
    USN-8048-1 366 CVEs

    linux-oem-6.17 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC ar…

    first Feb 17, 2026
  • Critical max 9.8
    USN-8098-7 8 CVEs

    linux-azure vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 25, 2026
  • Critical max 9.8
    USN-8098-6 8 CVEs

    linux-fips, linux-gcp-fips vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 24, 2026
  • Critical max 9.8
    USN-8098-3 8 CVEs

    linux-aws, linux-aws-5.4, linux-gcp-5.4, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 18, 2026
  • Critical max 9.8
    USN-8029-3 367 CVEs

    linux-azure vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC ar…

    first Feb 24, 2026
  • Critical max 9.8
    USN-8098-4 8 CVEs

    linux-hwe-5.4, linux-ibm vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 24, 2026
  • Critical max 9.8
    USN-8098-2 8 CVEs

    linux-gcp vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 17, 2026
  • Critical max 9.8
    USN-8098-1 8 CVEs

    linux vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 16, 2026