Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

8,409 results · Feed

  • Critical max 10.0
    USN-8875-1 951 CVEs 1 exploited

    linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities

    It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (…

    first Oct 6, 2026
  • Critical max 9.8
    USN-8961-1 1068 CVEs

    linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-5.15, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-realtime vulnerabilities

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205) Se…

    first Nov 3, 2026
  • Critical max 10.0
    USN-8917-1 1050 CVEs 1 exploited

    linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromi…

    first Oct 13, 2026
  • Critical max 10.0
    USN-8887-1 1050 CVEs

    linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-oracle, linux-realtime vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromi…

    first Oct 6, 2026
  • Critical max 10.0
    USN-8959-1 2894 CVEs

    linux, linux-aws, linux-gcp, linux-hwe-7.0, linux-ibm, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 a…

    first Nov 3, 2026
  • Critical max 10.0
    USN-8963-1 2016 CVEs 1 exploited

    linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205) It…

    first Nov 3, 2026
  • Critical max 10.0
    USN-8726-1 551 CVEs 2 exploited

    linux, linux-aws, linux-aws-7.0, linux-gcp, linux-gke, linux-hwe-7.0, linux-realtime vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 7, 2026
  • Critical max 10.0
    USN-8575-1 758 CVEs

    linux, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…

    first Jul 21, 2026
  • Critical max 10.0
    USN-8918-1 1049 CVEs 1 exploited

    linux-azure, linux-azure-fde, linux-azure-fips vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromi…

    first Oct 13, 2026
  • Critical max 10.0
    USN-8575-2 758 CVEs

    linux-aws, linux-aws-5.15, linux-aws-fips, linux-fips, linux-ibm, linux-nvidia vulnerabilities

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…

    first Jul 23, 2026
  • Critical max 10.0
    USN-9003-1 1150 CVEs

    linux-nvidia-7.0, linux-nvidia-bos vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromi…

    first Nov 6, 2026
  • High max 8.8
    USN-8903-2 232 CVEs 1 exploited

    linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architec…

    first Oct 9, 2026
  • Critical max 10.0
    USN-8888-2 1151 CVEs

    linux-azure-7.0, linux-azure-fde-7.0 vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromi…

    first Oct 8, 2026
  • High max 8.8
    USN-8903-1 232 CVEs 1 exploited

    linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-fips, linux-realtime, linux-realtime-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architec…

    first Oct 8, 2026
  • Critical max 9.8
    USN-8904-1 234 CVEs 1 exploited

    linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architec…

    first Oct 8, 2026
  • Critical max 10.0
    USN-8960-1 2889 CVEs

    linux-oem-7.0 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 a…

    first Nov 3, 2026
  • Critical max 10.0
    USN-8889-1 1049 CVEs

    linux-oem-7.0 vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromi…

    first Oct 6, 2026
  • Critical max 9.8
    USN-9002-1 485 CVEs

    linux-nvidia-tegra vulnerabilities

    It was discovered that the io_uring subsystem in the Linux kernel did not properly handle canceled task work when processing certain wait operations, leading to the operation being performed in the wrong task context. A local attacker could possibly use this …

    first Nov 6, 2026
  • Critical max 9.8
    USN-8962-1 756 CVEs

    linux-azure-fde vulnerabilities

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205) Se…

    first Nov 3, 2026
  • Critical max 9.8
    USN-8905-2 233 CVEs 1 exploited

    linux-gcp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architec…

    first Oct 9, 2026
  • Critical max 10.0
    USN-8877-1 952 CVEs 1 exploited

    linux-gcp, linux-gcp-fips vulnerabilities

    It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (…

    first Oct 6, 2026
  • Critical max 9.8
    USN-8574-3 913 CVEs

    linux-ibm, linux-ibm-6.8, linux-nvidia-tegra, linux-xilinx vulnerabilities

    It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 pro…

    first Jul 28, 2026
  • Critical max 9.8
    USN-8595-3 912 CVEs

    linux-aws-6.8, linux-aws-fips vulnerabilities

    It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 pro…

    first Jul 28, 2026
  • Critical max 9.8
    USN-8905-1 233 CVEs 1 exploited

    linux-gcp-6.8, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architec…

    first Oct 8, 2026
  • Critical max 10.0
    USN-8886-1 684 CVEs 1 exploited

    linux-nvidia-tegra vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVDIMM (Non-Volatile Memory Device) drivers; - Handshake API; - ARM32 archite…

    first Oct 6, 2026
  • Critical max 9.8
    USN-8906-1 349 CVEs 1 exploited

    linux-ibm-6.8 vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Oct 8, 2026
  • Critical max 9.8
    USN-8729-1 97 CVEs

    linux, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi, linux-realtime, linux-realtime-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute A…

    first Sep 7, 2026
  • Critical max 9.8
    USN-8911-1 29 CVEs

    linux-oem-6.17 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Ne…

    first Oct 9, 2026
  • Critical max 10.0
    USN-8879-1 972 CVEs 1 exploited

    linux-oracle-5.15 vulnerabilities

    It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (…

    first Oct 6, 2026
  • Critical max 9.8
    USN-8574-2 913 CVEs

    linux-fips, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities

    It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 pro…

    first Jul 23, 2026
  • Critical max 9.9
    USN-8816-1 101 CVEs

    linux, linux-aws, linux-aws-7.0, linux-hwe-7.0, linux-ibm, linux-oracle, linux-raspi, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distribut…

    first Sep 24, 2026
  • Critical max 10.0
    USN-8876-1 722 CVEs 1 exploited

    linux-azure-fde vulnerabilities

    It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (…

    first Oct 6, 2026
  • Critical max 9.8
    USN-8596-1 913 CVEs

    linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

    It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 pro…

    first Jul 23, 2026
  • Critical max 9.8
    USN-8665-1 912 CVEs

    linux-raspi, linux-raspi-realtime vulnerabilities

    It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 pro…

    first Aug 20, 2026
  • Critical max 10.0
    USN-8878-1 973 CVEs 1 exploited

    linux-gcp-5.15 vulnerabilities

    It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (…

    first Oct 6, 2026
  • Critical max 9.8
    USN-8593-1 796 CVEs

    linux-ibm, linux-oracle vulnerabilities

    It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. …

    first Jul 23, 2026
  • Critical max 10.0
    USN-8620-1 762 CVEs

    linux-azure-5.15, linux-azure-fde-5.15, linux-oracle-5.15 vulnerabilities

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…

    first Jul 28, 2026
  • Critical max 10.0
    USN-8887-3 1050 CVEs

    linux-gcp-7.0, linux-hwe-7.0, linux-oracle-7.0 vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromi…

    first Oct 9, 2026
  • Critical max 10.0
    USN-8875-2 951 CVEs 1 exploited

    linux-nvidia vulnerabilities

    It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (…

    first Oct 9, 2026
  • Critical max 10.0
    USN-8620-3 762 CVEs

    linux-intel-iot-realtime, linux-intel-iotg-5.15 vulnerabilities

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…

    first Jul 31, 2026