Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

8,409 results · Feed

  • High max 7.8
    USN-7610-2 6 CVEs

    linux-lowlatency, linux-oem-6.11 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; (CVE-2025-38001, CVE-2025-37997, CVE-20…

    first Jul 8, 2025
  • Critical max 9.8
    USN-7608-6 9 CVEs

    linux-xilinx-zynqmp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Memory management; - Netfilter; - N…

    first Jul 11, 2025
  • High max 8.1
    USN-6445-1 24 CVEs

    linux-intel-iotg vulnerabilities

    It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker could use this to cause a denial of service (excessive CPU consumption). (CVE-2023-1206) Daniel Trujillo,…

    first Oct 19, 2023
  • High max 8.1
    USN-6416-2 13 CVEs

    linux-hwe-5.15, linux-oracle-5.15 vulnerabilities

    It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker could use this to cause a denial of service (excessive CPU consumption). (CVE-2023-1206) Daniël Trujillo,…

    first Oct 6, 2023
  • Critical max 9.8
    USN-7608-7 9 CVEs

    linux-azure vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Memory management; - Netfilter; - N…

    first Jul 30, 2025
  • Critical max 9.8
    USN-7608-3 9 CVEs

    linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Memory management; - Netfilter; - N…

    first Jul 1, 2025
  • High max 7.8
    USN-7607-1 10 CVEs 1 exploited

    linux, linux-aws, linux-lts-xenial vulnerabilities

    It was discovered that a use-after-free vulnerability existed in the Bluetooth stack in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3640) Several security issues w…

    first Jul 1, 2025
  • Critical max 9.8
    USN-7608-5 9 CVEs

    linux-ibm-5.15, linux-intel-iotg, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Memory management; - Netfilter; - N…

    first Jul 8, 2025
  • High max 7.8
    USN-7607-2 10 CVEs 1 exploited

    linux-fips vulnerabilities

    It was discovered that a use-after-free vulnerability existed in the Bluetooth stack in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3640) Several security issues w…

    first Jul 1, 2025
  • Critical max 9.8
    USN-7671-1 11 CVEs

    linux, linux-aws, linux-aws-5.4, linux-aws-fips, linux-bluefield, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ACPI drivers; - GPU drivers; - SMB network file system; - Memory management; …

    first Jul 25, 2025
  • High max 7.8
    USN-7610-3 6 CVEs

    linux-lowlatency-hwe-6.11 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; (CVE-2025-38001, CVE-2025-37997, CVE-20…

    first Jul 15, 2025
  • Critical max 10.0
    USN-7606-1 177 CVEs

    linux-oem-6.11 vulnerabilities

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312) Several security issues were…

    first Jun 30, 2025
  • Critical max 10.0
    USN-7591-6 67 CVEs

    linux-raspi vulnerabilities

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805) It was disc…

    first Jul 17, 2025
  • Critical max 9.8
    USN-6466-1 40 CVEs

    linux-nvidia-6.2 vulnerabilities

    Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel contained a race condition during device removal, leading to a use-after- free vulnerability. A physically proximate attacker could use this to cause a denial of service (system crash) or pos…

    first Oct 31, 2023
  • High max 8.1
    USN-6445-2 24 CVEs

    linux-intel-iotg-5.15 vulnerabilities

    It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker could use this to cause a denial of service (excessive CPU consumption). (CVE-2023-1206) Daniel Trujillo,…

    first Oct 24, 2023
  • Critical max 9.8
    USN-7609-3 7 CVEs

    linux-ibm vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Netfilter; - Network traffic control; (CVE-2025-38001, …

    first Jul 4, 2025
  • Critical max 9.8
    USN-7608-4 9 CVEs

    linux-aws-5.15, linux-intel-iot-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Memory management; - Netfilter; - N…

    first Jul 3, 2025
  • High max 8.1
    USN-6416-3 13 CVEs

    linux-raspi vulnerabilities

    It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker could use this to cause a denial of service (excessive CPU consumption). (CVE-2023-1206) Daniel Trujillo,…

    first Oct 19, 2023
  • High max 7.8
    USN-7607-3 10 CVEs 1 exploited

    linux-kvm vulnerabilities

    It was discovered that a use-after-free vulnerability existed in the Bluetooth stack in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3640) Several security issues w…

    first Jul 8, 2025
  • High max 7.8
    USN-7755-1 10 CVEs

    linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - SPI subsystem; - USB core drivers; - NILFS2 file system; - I…

    first Sep 17, 2025
  • Critical max 10.0
    USN-7597-2 66 CVEs

    linux-azure-fips vulnerabilities

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805) Several sec…

    first Jun 24, 2025
  • High max 7.8
    USN-7610-1 6 CVEs

    linux, linux-aws, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-oracle, linux-raspi, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; (CVE-2025-38001, CVE-2025-37997, CVE-20…

    first Jul 1, 2025
  • Critical max 9.8
    USN-7609-5 7 CVEs

    linux-azure-6.8, linux-azure-nvidia vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Netfilter; - Network traffic control; (CVE-2025-38001, …

    first Jul 17, 2025
  • Critical max 9.8
    USN-7609-4 7 CVEs

    linux-azure vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Netfilter; - Network traffic control; (CVE-2025-38001, …

    first Jul 8, 2025
  • Critical max 9.8
    USN-7609-2 7 CVEs

    linux-realtime, linux-raspi-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Netfilter; - Network traffic control; (CVE-2025-38001, …

    first Jul 1, 2025
  • Critical max 10.0
    USN-7591-4 67 CVEs

    linux-aws vulnerabilities

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805) It was disc…

    first Jun 24, 2025
  • Critical max 10.0
    USN-7591-3 67 CVEs

    linux-intel-iot-realtime, linux-realtime vulnerabilities

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805) It was disc…

    first Jun 24, 2025
  • Medium max 6.5
    USN-7535-1 8 CVEs

    intel-microcode vulnerabilities

    Sander Wiebing and Cristiano Giuffrida discovered that some Intel® Processors did not properly handle data in Shared Microarchitectural Structures during Transient Execution. An authenticated attacker could possibly use this issue to obtain sensitive informat…

    first May 27, 2025
  • Critical max 9.1
    USN-6520-1 16 CVEs

    linux-starfive-6.2 vulnerabilities

    Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA driver in the Linux kernel did not properly check for zero-length STAG or MR registration. A remote attacker could possibly use this to execute arbitrar…

    first Nov 28, 2023
  • High max 7.8
    USN-8480-1 2 CVEs

    sqlite3 vulnerabilities

    It was discovered that SQLite incorrectly handled certain memory operations in the FTS5 full-text search extension. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.

    first Jun 29, 2026
  • Critical max 9.2
    USN-8958-1 3 CVEs 1 exploited

    dotnet8, dotnet10, dotnet11 vulnerabilities

    It was discovered that the .NET Blazor WebAssembly debug proxy did not properly escape certain values. An attacker could possibly use this issue to execute arbitrary code. The fix for this CVE was originally released via USN-8942-1, but it was found to be inc…

    first Oct 29, 2026
  • Critical max 9.8
    USN-7764-1 103 CVEs

    linux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Accel…

    first Sep 24, 2025
  • High max 7.8
    USN-7874-1 8 CVEs 1 exploited

    linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Nov 19, 2025
  • Critical max 9.8
    USN-7703-2 70 CVEs

    linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gkeop, linux-ibm, linux-ibm-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer…

    first Aug 20, 2025
  • Critical max 9.8
    USN-7703-4 70 CVEs

    linux-gke, linux-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer…

    first Aug 28, 2025
  • High max 7.8
    USN-7861-1 4 CVEs 1 exploited

    linux, linux-aws, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-lowlatency vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Nov 6, 2025
  • Critical max 9.8
    USN-7703-1 70 CVEs

    linux, linux-aws, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer…

    first Aug 19, 2025
  • High max 7.8
    USN-7874-3 8 CVEs 1 exploited

    linux-iot vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Dec 4, 2025
  • High max 7.8
    USN-7864-1 5 CVEs 1 exploited

    linux-gcp, linux-gcp-6.8, linux-gke vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Nov 7, 2025
  • High max 8.2
    USN-7863-1 12 CVEs 2 exploited

    linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

    Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker i…

    first Nov 6, 2025