Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

8,409 results · Feed

  • Critical max 9.8
    USN-8030-1 366 CVEs

    linux-gcp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC ar…

    first Feb 12, 2026
  • Critical max 9.1
    USN-8070-1 9 CVEs

    linux, linux-aws, linux-kvm vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 4, 2026
  • Critical max 9.8
    USN-8015-1 3 CVEs

    linux, linux-gke, linux-gkeop, linux-hwe-6.8, linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; - io_uring subsystem; (CVE-2025…

    first Feb 4, 2026
  • High max 7.8
    USN-8014-1 2 CVEs

    linux, linux-aws, linux-azure, linux-gcp, linux-oem-6.17, linux-oracle, linux-raspi, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Unix domain sockets; (CVE-2025-40019, CVE-2025-40214)

    first Feb 4, 2026
  • Critical max 9.8
    USN-8016-1 4 CVEs

    linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SPI subsystem; - SMB network file system; - io_uring sub…

    first Feb 4, 2026
  • Critical max 9.8
    USN-8015-3 3 CVEs

    linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; - io_uring subsystem; (CVE-2025…

    first Feb 6, 2026
  • Critical max 9.8
    USN-8013-1 2 CVEs

    linux, linux-aws, linux-azure, linux-azure-5.15, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; (CVE-2025-38561, CVE-2025-40019)

    first Feb 4, 2026
  • High max 7.8
    USN-7988-5 7 CVEs

    linux-azure, linux-azure-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - NVME drivers; - File systems infrastructure; - Timer subsyst…

    first Feb 12, 2026
  • Critical max 9.8
    USN-8015-5 3 CVEs

    linux-lowlatency, linux-xilinx vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; - io_uring subsystem; (CVE-2025…

    first Feb 20, 2026
  • Critical max 9.8
    USN-8015-2 3 CVEs

    linux-realtime, linux-realtime-6.8, linux-raspi-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; - io_uring subsystem; (CVE-2025…

    first Feb 4, 2026
  • Critical max 9.8
    USN-8013-4 2 CVEs

    linux-aws-5.15, linux-gcp-5.15, linux-nvidia-tegra-igx, linux-oracle-5.15, linux-xilinx-zynqmp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; (CVE-2025-38561, CVE-2025-40019)

    first Feb 11, 2026
  • Critical max 9.8
    USN-8013-3 2 CVEs

    linux-realtime, linux-intel-iot-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; (CVE-2025-38561, CVE-2025-40019)

    first Feb 4, 2026
  • High max 7.8
    USN-7988-3 7 CVEs

    linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - NVME drivers; - File systems infrastructure; - Timer subsyst…

    first Feb 5, 2026
  • High max 7.8
    USN-7988-1 7 CVEs

    linux, linux-aws, linux-aws-hwe, linux-hwe, linux-kvm, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - NVME drivers; - File systems infrastructure; - Timer subsyst…

    first Jan 29, 2026
  • Critical max 9.8
    USN-8013-2 2 CVEs

    linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; (CVE-2025-38561, CVE-2025-40019)

    first Feb 4, 2026
  • High max 7.8
    USN-7990-6 3 CVEs

    linux-raspi, linux-raspi-5.4 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Padata parallel execution mechanism; - Netfilter; (CVE-2…

    first Mar 3, 2026
  • High max 7.8
    USN-7990-5 3 CVEs

    linux-azure, linux-azure-5.4, linux-azure-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Padata parallel execution mechanism; - Netfilter; (CVE-2…

    first Feb 20, 2026
  • High max 7.8
    USN-7990-4 3 CVEs

    linux-oracle, linux-oracle-5.4 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Padata parallel execution mechanism; - Netfilter; (CVE-2…

    first Feb 12, 2026
  • High max 7.8
    USN-7990-3 3 CVEs

    linux-xilinx-zynqmp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Padata parallel execution mechanism; - Netfilter; (CVE-2…

    first Feb 11, 2026
  • High max 7.8
    USN-7988-4 7 CVEs

    linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - NVME drivers; - File systems infrastructure; - Timer subsyst…

    first Feb 11, 2026
  • High max 7.8
    USN-7988-2 7 CVEs

    linux-aws-fips, linux-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - NVME drivers; - File systems infrastructure; - Timer subsyst…

    first Jan 29, 2026
  • High max 7.8
    USN-7987-2 6 CVEs

    linux-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Media drivers; - File systems infrastructure; - Timer s…

    first Jan 29, 2026
  • Critical max 10.0
    USN-7940-2 73 CVEs 3 exploited

    linux-azure-nvidia vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Jan 9, 2026
  • Critical max 10.0
    USN-8031-3 752 CVEs

    linux-gcp, linux-gke vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 19, 2026
  • Critical max 10.0
    USN-8028-4 753 CVEs

    linux-aws-fips, linux-fips vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 17, 2026
  • Critical max 10.0
    USN-8028-1 753 CVEs

    linux, linux-raspi vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 11, 2026
  • Critical max 10.0
    USN-8028-3 753 CVEs

    linux-realtime, linux-raspi-realtime vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 17, 2026
  • High max 8.8
    USN-7654-1 139 CVEs

    linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-oracle-5.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PA-RISC architecture; - PowerPC architecture; - x86 architecture; - Block lay…

    first Jul 18, 2025
  • Critical max 9.8
    USN-8029-1 367 CVEs

    linux, linux-raspi, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC ar…

    first Feb 12, 2026
  • Critical max 9.8
    USN-8095-3 423 CVEs

    linux-realtime, linux-realtime-6.8 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 17, 2026
  • Critical max 10.0
    USN-8028-7 753 CVEs

    linux-nvidia-lowlatency vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 19, 2026
  • Critical max 10.0
    USN-8028-2 753 CVEs

    linux-realtime-6.8 vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 12, 2026
  • Critical max 10.0
    USN-8031-2 752 CVEs

    linux-gcp-fips vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 18, 2026
  • Critical max 10.0
    USN-8031-1 752 CVEs

    linux-gcp-6.8 vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Bor…

    first Feb 12, 2026
  • Critical max 9.8
    USN-7909-3 178 CVEs

    linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC arch…

    first Dec 4, 2025
  • Critical max 9.8
    USN-8098-5 8 CVEs

    linux-iot, linux-kvm vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 24, 2026
  • Critical max 9.8
    USN-7909-4 178 CVEs

    linux-gcp, linux-gke, linux-gkeop vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC arch…

    first Dec 5, 2025
  • Critical max 9.1
    USN-8070-3 9 CVEs

    linux-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 4, 2026
  • Critical max 9.1
    USN-8070-2 9 CVEs

    linux-aws, linux-lts-xenial vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class driv…

    first Mar 4, 2026
  • Critical max 9.8
    USN-7938-1 187 CVEs 1 exploited

    linux-azure-5.15 vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Dec 16, 2025