Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

8,409 results · Feed

  • Critical max 9.8
    USN-7934-1 205 CVEs 1 exploited

    linux-azure, linux-azure-6.14 vulnerabilities

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and …

    first Dec 15, 2025
  • Critical max 9.8
    USN-7933-1 186 CVEs

    linux-kvm vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Dec 15, 2025
  • High max 7.8
    USN-7990-2 3 CVEs

    linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Padata parallel execution mechanism; - Netfilter; (CVE-2…

    first Jan 30, 2026
  • High max 7.8
    USN-7987-1 6 CVEs

    linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Media drivers; - File systems infrastructure; - Timer s…

    first Jan 29, 2026
  • Critical max 10.0
    USN-7940-1 73 CVEs 3 exploited

    linux-azure-fips vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Dec 17, 2025
  • High max 7.8
    USN-7990-1 3 CVEs

    linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Padata parallel execution mechanism; - Netfilter; (CVE-2…

    first Jan 30, 2026
  • High max 8.6
    USN-7939-2 23 CVEs 2 exploited

    linux-azure-fips vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Dec 16, 2025
  • High max 8.6
    USN-7939-1 23 CVEs 2 exploited

    linux-azure, linux-azure-5.4 vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Dec 16, 2025
  • High max 7.8
    USN-7935-1 13 CVEs 2 exploited

    linux-azure, linux-azure-6.8 vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Dec 15, 2025
  • Critical max 9.8
    USN-8015-4 3 CVEs

    linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency-hwe-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; - io_uring subsystem; (CVE-2025…

    first Feb 11, 2026
  • High max 8.6
    USN-7937-1 33 CVEs 3 exploited

    linux-azure-fips vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Dec 16, 2025
  • High max 8.6
    USN-7928-1 9 CVEs 1 exploited

    linux, linux-aws, linux-aws-5.15, linux-azure, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-oracle-5.15, linux-xilinx-zynqmp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Media drivers; - Network drivers; - AFS file system; - F…

    first Dec 11, 2025
  • Critical max 9.8
    USN-7936-1 6 CVEs 1 exploited

    linux-oem-6.14 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Compute Acceleration Framework; - Media drivers; - Netfi…

    first Dec 15, 2025
  • High max 7.8
    USN-7931-5 5 CVEs 1 exploited

    linux-raspi, linux-raspi-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Media drivers; - Memory management; - Appletalk network …

    first Jan 9, 2026
  • High max 7.8
    USN-7931-4 5 CVEs 1 exploited

    linux-xilinx vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Media drivers; - Memory management; - Appletalk network …

    first Dec 19, 2025
  • High max 7.8
    USN-7931-3 5 CVEs 1 exploited

    linux-realtime, linux-realtime-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Media drivers; - Memory management; - Appletalk network …

    first Dec 15, 2025
  • High max 7.8
    USN-7931-1 5 CVEs 1 exploited

    linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle, linux-oracle-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Media drivers; - Memory management; - Appletalk network …

    first Dec 15, 2025
  • Critical max 9.8
    USN-7774-2 142 CVEs 1 exploited

    linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Sep 25, 2025
  • High max 7.8
    USN-7931-2 5 CVEs 1 exploited

    linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Media drivers; - Memory management; - Appletalk network …

    first Dec 15, 2025
  • High max 8.6
    USN-7930-2 18 CVEs 1 exploited

    linux-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBan…

    first Dec 15, 2025
  • High max 8.6
    USN-7928-2 9 CVEs 1 exploited

    linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Media drivers; - Network drivers; - AFS file system; - F…

    first Dec 11, 2025
  • High max 8.6
    USN-7928-4 9 CVEs 1 exploited

    linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Media drivers; - Network drivers; - AFS file system; - F…

    first Dec 19, 2025
  • High max 8.6
    USN-7928-3 9 CVEs 1 exploited

    linux-realtime, linux-intel-iot-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Media drivers; - Network drivers; - AFS file system; - F…

    first Dec 11, 2025
  • High max 8.6
    USN-7922-5 15 CVEs 1 exploited

    linux-iot vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - InfiniBand drivers; - Media drivers; - N…

    first Jan 12, 2026
  • High max 8.6
    USN-7922-4 15 CVEs 1 exploited

    linux-raspi, linux-raspi-5.4 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - InfiniBand drivers; - Media drivers; - N…

    first Jan 6, 2026
  • High max 8.6
    USN-7922-2 15 CVEs 1 exploited

    linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - InfiniBand drivers; - Media drivers; - N…

    first Dec 11, 2025
  • High max 8.6
    USN-7907-1 22 CVEs 1 exploited

    linux, linux-aws, linux-aws-hwe, linux-kvm, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBan…

    first Dec 3, 2025
  • High max 8.6
    USN-7922-1 15 CVEs 1 exploited

    linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-xilinx-zynqmp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - InfiniBand drivers; - Media drivers; - N…

    first Dec 10, 2025
  • Critical max 9.8
    USN-7909-5 178 CVEs

    linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC arch…

    first Dec 15, 2025
  • High max 8.6
    USN-7907-5 22 CVEs 1 exploited

    linux-azure, linux-azure-4.15, linux-oracle, vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBan…

    first Dec 12, 2025
  • High max 8.6
    USN-7907-2 22 CVEs 1 exploited

    linux-aws-fips, linux-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBan…

    first Dec 3, 2025
  • Critical max 10.0
    USN-7835-1 59 CVEs 1 exploited

    linux, linux-aws, linux-azure, linux-azure-6.8, linux-gcp, linux-gkeop, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI driver…

    first Oct 22, 2025
  • Critical max 9.8
    USN-7921-2 4 CVEs 1 exploited

    linux-realtime-6.14 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Media drivers; - Netfilter; - TLS protocol; (CVE-2025-39…

    first Dec 19, 2025
  • Critical max 9.8
    USN-7910-2 178 CVEs

    linux-azure vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Dec 5, 2025
  • Critical max 9.8
    USN-7909-2 178 CVEs

    linux-intel-iot-realtime, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC arch…

    first Dec 4, 2025
  • High max 8.6
    USN-7907-4 22 CVEs 1 exploited

    linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBan…

    first Dec 4, 2025
  • High max 8.6
    USN-7907-3 22 CVEs 1 exploited

    linux-gcp, linux-gcp-4.15, linux-hwe vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBan…

    first Dec 4, 2025
  • High max 7.9
    USN-7906-2 6 CVEs

    linux-gcp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - Android drivers; - TTY drivers; - F2…

    first Dec 5, 2025
  • Critical max 9.8
    USN-7910-1 178 CVEs

    linux-azure-fips vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Dec 4, 2025
  • High max 7.9
    USN-7906-1 6 CVEs

    linux, linux-aws, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - Android drivers; - TTY drivers; - F2…

    first Dec 3, 2025