Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

All Critical High Medium Low With exploited CVEs

8,409 results · Feed

  • Critical max 9.8
    USN-8530-2 22 CVEs

    linux-aws-hwe vulnerabilities

    It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processin…

    first Aug 13, 2026
  • Critical max 9.8
    USN-8296-1 189 CVEs

    linux-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - D…

    first May 22, 2026
  • Critical max 9.8
    USN-8183-2 138 CVEs

    linux-aws, linux-aws-6.17, linux-hwe-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first Apr 23, 2026
  • Critical max 9.8
    USN-8297-1 83 CVEs

    linux-gcp-5.15 vulnerabilities

    Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. (CVE-2023-…

    first May 22, 2026
  • Critical max 9.8
    USN-8296-2 189 CVEs

    linux-nvidia-tegra vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - D…

    first May 25, 2026
  • Critical max 9.8
    USN-8493-2 64 CVEs

    linux-oracle-5.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - Cryptographic API; - InfiniBand drivers; - IOMMU subsy…

    first Jul 2, 2026
  • Critical max 9.8
    USN-8243-1 426 CVEs

    linux-azure-5.15 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first May 7, 2026
  • Critical max 9.8
    USN-8203-1 177 CVEs

    linux-oracle, linux-oracle-6.8 vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first Apr 23, 2026
  • Critical max 9.8
    USN-8266-1 13 CVEs

    linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-azure-4.15, linux-fips, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-hwe, linux-kvm, linux-oracle vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first May 11, 2026
  • Critical max 9.8
    USN-8204-1 175 CVEs

    linux-raspi-realtime vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first Apr 23, 2026
  • Critical max 9.8
    USN-8184-1 175 CVEs

    linux-realtime, linux-realtime-6.8 vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first Apr 17, 2026
  • Critical max 9.8
    USN-8187-1 80 CVEs

    linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth driv…

    first Apr 17, 2026
  • Critical max 9.8
    USN-8185-1 173 CVEs

    linux-nvidia, linux-nvidia-6.8 vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first Apr 17, 2026
  • Critical max 9.8
    USN-8275-1 84 CVEs

    linux-xilinx-zynqmp vulnerabilities

    Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. (CVE-2023-…

    first May 19, 2026
  • Critical max 9.8
    USN-8267-1 18 CVEs

    linux-azure, linux-azure-fips, linux-oracle vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first May 11, 2026
  • High max 8.8
    USN-8200-2 5 CVEs

    linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - GPU drivers; - I2C subsystem; - Ne…

    first Apr 22, 2026
  • Critical max 9.8
    USN-8185-2 173 CVEs

    linux-nvidia-lowlatency vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first Apr 28, 2026
  • Critical max 9.8
    USN-8224-1 24 CVEs

    linux-bluefield vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Apr 29, 2026
  • High max 8.8
    USN-8200-3 5 CVEs

    linux-raspi, linux-raspi-5.4 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - GPU drivers; - I2C subsystem; - Ne…

    first May 11, 2026
  • Critical max 9.8
    USN-8186-1 81 CVEs

    linux-intel-iot-realtime, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth driv…

    first Apr 17, 2026
  • Critical max 9.8
    USN-8180-6 80 CVEs

    linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth driv…

    first May 11, 2026
  • Critical max 9.8
    USN-8096-3 217 CVEs

    linux-aws-5.15, linux-gcp-5.15, linux-gke, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 17, 2026
  • Critical max 9.8
    USN-8188-1 84 CVEs

    linux-hwe-5.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - Drivers c…

    first Apr 17, 2026
  • High max 8.8
    USN-8200-1 5 CVEs

    linux, linux-aws, linux-aws-5.4, linux-azure, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - GPU drivers; - I2C subsystem; - Ne…

    first Apr 22, 2026
  • Critical max 9.8
    USN-8179-3 174 CVEs

    linux-hwe-6.8, linux-ibm-6.8, linux-raspi vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first Apr 23, 2026
  • Critical max 9.8
    USN-8094-1 172 CVEs

    linux, linux-aws, linux-aws-6.17, linux-gcp, linux-hwe-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 16, 2026
  • Critical max 9.8
    USN-8180-5 80 CVEs

    linux-ibm, linux-ibm-5.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth driv…

    first Apr 24, 2026
  • Critical max 9.8
    USN-8094-2 172 CVEs

    linux-gcp-6.17, linux-realtime vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 17, 2026
  • Critical max 9.8
    USN-8265-1 174 CVEs

    linux-nvidia-tegra vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first May 11, 2026
  • Critical max 9.8
    USN-8258-1 176 CVEs

    linux-azure vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first May 7, 2026
  • Critical max 9.8
    USN-8116-1 217 CVEs

    linux-intel-iot-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptogr…

    first Mar 23, 2026
  • Critical max 9.8
    USN-8201-1 22 CVEs

    linux-azure-5.4 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Apr 22, 2026
  • Critical max 9.8
    USN-8179-4 174 CVEs

    linux-gcp-6.8 vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first May 7, 2026
  • Critical max 9.8
    USN-8152-1 186 CVEs

    linux-oem-6.17 vulnerabilities

    It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values re…

    first Apr 6, 2026
  • Critical max 9.8
    USN-8100-1 425 CVEs

    linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 16, 2026
  • Critical max 9.8
    USN-8096-2 217 CVEs

    linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 16, 2026
  • Critical max 9.8
    USN-8094-3 172 CVEs

    linux-realtime-6.17 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 23, 2026
  • Critical max 9.8
    USN-8163-1 350 CVEs

    linux-azure-fips vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Apr 9, 2026
  • Critical max 9.8
    USN-8183-1 138 CVEs

    linux-gcp, linux-gcp-6.17 vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first Apr 17, 2026
  • Critical max 9.8
    USN-8245-1 140 CVEs

    linux-azure, linux-azure-6.17, linux-oem-6.17 vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first May 7, 2026