Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

8,409 results · Feed

  • Critical max 10.0
    USN-8887-2 1050 CVEs

    linux-aws-7.0 vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromi…

    first Oct 8, 2026
  • Critical max 10.0
    USN-8728-2 1417 CVEs 2 exploited

    linux-azure-7.0 vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 22, 2026
  • Critical max 9.9
    USN-8816-2 101 CVEs

    linux-gcp, linux-gcp-7.0, linux-oem-7.0 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distribut…

    first Sep 29, 2026
  • Critical max 10.0
    USN-8726-4 551 CVEs 2 exploited

    linux-azure, linux-oracle vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 22, 2026
  • Critical max 9.8
    USN-8664-1 859 CVEs

    linux-nvidia-bos vulnerabilities

    It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. …

    first Aug 20, 2026
  • Critical max 9.8
    USN-8603-1 1030 CVEs

    linux-azure, linux-azure-fde vulnerabilities

    It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 pro…

    first Jul 24, 2026
  • Critical max 9.8
    USN-8663-1 862 CVEs

    linux-nvidia, linux-nvidia-7.0 vulnerabilities

    It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. …

    first Aug 20, 2026
  • Critical max 10.0
    USN-8668-2 763 CVEs

    linux-raspi vulnerabilities

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…

    first Sep 21, 2026
  • Critical max 10.0
    USN-8610-1 757 CVEs

    linux-azure-fde vulnerabilities

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…

    first Jul 24, 2026
  • Critical max 10.0
    USN-8575-3 758 CVEs

    linux-azure, linux-oracle vulnerabilities

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…

    first Jul 24, 2026
  • Critical max 10.0
    USN-8668-1 763 CVEs

    linux-gcp-5.15 vulnerabilities

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…

    first Aug 21, 2026
  • Critical max 9.9
    USN-8816-4 101 CVEs

    linux-gke vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distribut…

    first Oct 2, 2026
  • Critical max 10.0
    USN-8726-2 551 CVEs 2 exploited

    linux-raspi vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 18, 2026
  • Critical max 10.0
    USN-8576-1 756 CVEs

    linux-nvidia-tegra-5.15 vulnerabilities

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…

    first Jul 21, 2026
  • Critical max 10.0
    USN-8888-1 1151 CVEs

    linux-azure, linux-azure-fde vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromi…

    first Oct 6, 2026
  • Critical max 9.8
    USN-8761-3 95 CVEs

    linux-azure-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute A…

    first Sep 21, 2026
  • Critical max 10.0
    USN-8727-1 547 CVEs 2 exploited

    linux-oem-7.0 vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 7, 2026
  • Critical max 10.0
    USN-8726-3 551 CVEs 2 exploited

    linux-ibm vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 21, 2026
  • Critical max 9.9
    USN-8816-3 101 CVEs

    linux-oracle-7.0 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distribut…

    first Sep 30, 2026
  • Critical max 10.0
    USN-8728-1 1417 CVEs 2 exploited

    linux-gcp-7.0 vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 7, 2026
  • Critical max 9.8
    USN-8729-6 97 CVEs

    linux-aws, linux-aws-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute A…

    first Sep 29, 2026
  • Critical max 10.0
    USN-8576-2 756 CVEs

    linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…

    first Jul 23, 2026
  • Critical max 10.0
    USN-8781-1 527 CVEs 1 exploited

    linux-nvidia-tegra vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 18, 2026
  • Critical max 10.0
    USN-8760-2 550 CVEs 2 exploited

    linux-nvidia vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - User-space API (UAPI); - Kernel build system; - ARM32 architecture; - ARM64 a…

    first Sep 22, 2026
  • Critical max 9.8
    USN-8608-1 914 CVEs

    linux-azure-fips vulnerabilities

    It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 pro…

    first Jul 24, 2026
  • Critical max 9.8
    USN-8729-4 97 CVEs

    linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute A…

    first Sep 22, 2026
  • Critical max 10.0
    USN-8800-1 552 CVEs 2 exploited

    linux-nvidia-bos vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - User-space API (UAPI); - Kernel build system; - ARM32 architecture; - ARM64 a…

    first Sep 22, 2026
  • Critical max 10.0
    USN-8728-3 1417 CVEs 2 exploited

    linux-oracle-7.0 vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 29, 2026
  • Critical max 10.0
    USN-8620-4 762 CVEs

    linux-intel-iotg vulnerabilities

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…

    first Jul 31, 2026
  • Critical max 9.8
    USN-8618-1 846 CVEs

    linux-aws, linux-raspi vulnerabilities

    It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. …

    first Jul 28, 2026
  • Critical max 9.8
    USN-8802-1 98 CVEs

    linux-oracle, linux-oracle-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute A…

    first Sep 22, 2026
  • Critical max 9.8
    USN-8729-5 97 CVEs

    linux-aws-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute A…

    first Sep 25, 2026
  • Critical max 10.0
    USN-8620-2 762 CVEs

    linux-azure-fips vulnerabilities

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…

    first Jul 29, 2026
  • Critical max 9.8
    USN-8574-1 913 CVEs

    linux-gcp-fips vulnerabilities

    It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 pro…

    first Jul 21, 2026
  • Critical max 10.0
    USN-8760-1 550 CVEs 2 exploited

    linux-nvidia-7.0 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - User-space API (UAPI); - Kernel build system; - ARM32 architecture; - ARM64 a…

    first Sep 15, 2026
  • Critical max 9.8
    USN-8729-3 97 CVEs

    linux-gcp-6.8, linux-ibm, linux-xilinx vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute A…

    first Sep 21, 2026
  • Critical max 9.8
    USN-8595-2 912 CVEs

    linux-aws vulnerabilities

    It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 pro…

    first Jul 24, 2026
  • Critical max 9.8
    USN-8595-1 912 CVEs

    linux-oracle-6.8 vulnerabilities

    It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 pro…

    first Jul 23, 2026
  • Critical max 9.8
    USN-7894-1 30 CVEs

    edk2 vulnerabilities

    It was discovered that EDK II was susceptible to a predictable TCP Initial Sequence Number. An attacker could possibly use this issue to gain unauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2023-45236, CVE-2023-45237…

    first Nov 26, 2025
  • Critical max 9.8
    USN-8729-2 97 CVEs

    linux-raspi-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute A…

    first Sep 18, 2026