Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

All Critical High Medium Low With exploited CVEs

8,409 results · Feed

  • High max 8.8
    USN-8164-1 15 CVEs

    linux-intel-iot-realtime vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Apr 9, 2026
  • Critical max 9.8
    USN-8177-2 139 CVEs

    linux-realtime-6.17 vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first Apr 17, 2026
  • Critical max 9.8
    USN-8141-1 334 CVEs

    linux-raspi vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Apr 1, 2026
  • High max 8.8
    USN-8159-1 4 CVEs

    linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oracle, linux-oracle-5.15, linux-raspi, linux-xilinx-zynqmp vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - Netfilter; - Network traffic contr…

    first Apr 8, 2026
  • Critical max 9.8
    USN-8165-1 438 CVEs

    linux-azure-fips vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Apr 9, 2026
  • Critical max 9.8
    USN-8180-3 80 CVEs

    linux-azure, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-oracle-5.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth driv…

    first Apr 23, 2026
  • Critical max 9.8
    USN-8179-2 174 CVEs

    linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first Apr 17, 2026
  • Critical max 9.8
    USN-8163-2 350 CVEs

    linux-azure vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Apr 13, 2026
  • Critical max 9.8
    USN-8177-1 139 CVEs

    linux, linux-realtime vulnerabilities

    Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issu…

    first Apr 17, 2026
  • Critical max 9.8
    USN-8096-5 217 CVEs

    linux-nvidia-tegra-igx vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 23, 2026
  • Critical max 9.8
    USN-8094-4 172 CVEs

    linux-azure, linux-azure-6.17 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 25, 2026
  • Critical max 9.8
    USN-8162-1 84 CVEs

    linux-nvidia-tegra-5.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - Drivers c…

    first Apr 9, 2026
  • High max 7.8
    USN-8149-3 3 CVEs

    linux-azure, linux-azure-6.17 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 14, 2026
  • High max 7.8
    USN-8148-6 3 CVEs

    linux-azure, linux-azure-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 14, 2026
  • Critical max 9.8
    USN-8096-4 217 CVEs

    linux-realtime vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Mar 17, 2026
  • Critical max 9.8
    USN-8180-2 80 CVEs

    linux-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth driv…

    first Apr 17, 2026
  • High max 8.8
    USN-8159-3 4 CVEs

    linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - Netfilter; - Network traffic contr…

    first Apr 8, 2026
  • High max 7.8
    USN-8148-4 3 CVEs

    linux-realtime-6.17 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 6, 2026
  • High max 8.8
    USN-8145-1 5 CVEs

    linux, linux-aws, linux-aws-hwe, linux-kvm, linux-oracle vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; …

    first Apr 2, 2026
  • High max 8.8
    USN-8159-2 4 CVEs

    linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - Netfilter; - Network traffic contr…

    first Apr 8, 2026
  • High max 7.8
    USN-8148-1 3 CVEs

    linux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-nvidia, linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 2, 2026
  • High max 8.8
    USN-8145-3 5 CVEs

    linux-gcp, linux-gcp-4.15, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; …

    first Apr 6, 2026
  • High max 8.8
    USN-8143-1 7 CVEs

    linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - GPU drivers; - BTRFS file system; - GFS2 file system; - …

    first Apr 1, 2026
  • High max 7.8
    USN-8149-1 3 CVEs

    linux, linux-aws, linux-aws-6.17, linux-gcp, linux-gcp-6.17, linux-hwe-6.17, linux-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 2, 2026
  • High max 7.8
    USN-8148-3 3 CVEs

    linux-realtime, linux-realtime-6.8, linux-raspi-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 2, 2026
  • High max 8.8
    USN-8145-2 5 CVEs

    linux-fips, linux-aws-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; …

    first Apr 2, 2026
  • Critical max 9.8
    USN-8180-4 80 CVEs

    linux-azure-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Drivers core; - Bluetooth driv…

    first Apr 23, 2026
  • High max 7.8
    USN-8149-2 3 CVEs

    linux-oracle, linux-oracle-6.17, linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 9, 2026
  • High max 7.8
    USN-8148-5 3 CVEs

    linux-aws-6.8, linux-gcp-6.8, linux-hwe-6.8, linux-ibm-6.8, linux-lowlatency-hwe-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 9, 2026
  • High max 7.8
    USN-8148-2 3 CVEs

    linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 2, 2026
  • High max 8.8
    USN-8145-5 5 CVEs

    linux-azure, linux-azure-4.15 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; …

    first Apr 15, 2026
  • Critical max 9.8
    USN-8098-10 17 CVEs

    linux-raspi, linux-raspi-5.4 vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Apr 20, 2026
  • Critical max 9.8
    USN-8094-5 172 CVEs

    linux-raspi vulnerabilities

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of se…

    first Apr 1, 2026
  • High max 7.8
    USN-8148-7 3 CVEs

    linux-nvidia-lowlatency, linux-nvidia-tegra vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, C…

    first Apr 16, 2026
  • High max 8.8
    USN-8145-4 5 CVEs

    linux-hwe vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; …

    first Apr 9, 2026
  • High max 8.8
    USN-8143-2 7 CVEs

    linux-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - GPU drivers; - BTRFS file system; - GFS2 file system; - …

    first Apr 2, 2026
  • Unscored
    USN-8995-1 2 CVEs

    yaws vulnerabilities

    It was discovered that Yaws did not properly sanitize XML input in its WebDAV implementation. A remote attacker could possibly use this issue to perform XML external entity injection attacks. (CVE-2020-24379) It was discovered that Yaws mishandled certain inp…

    first Nov 3, 2026
  • High max 8.6
    USN-8975-1 10 CVEs

    libsoup2.4, libsoup3 vulnerabilities

    It was discovered that libsoup incorrectly handled certain WebSocket frames. A remote attacker could possibly use this issue to cause an application to crash or expose sensitive information. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu …

    first Nov 3, 2026
  • Unscored
    USN-8991-1 1 CVE

    rxvt-unicode vulnerability

    It was discovered that rxvt-unicode incorrectly handled certain escape sequences. An attacker could possibly use this issue to execute arbitrary code if a user displayed specially crafted text in the terminal.

    first Nov 3, 2026
  • High max 7.4
    USN-8987-1 2 CVEs 1 exploited

    libuser vulnerabilities

    It was discovered that libuser did not properly validate the GECOS field when changing user information. A local attacker could possibly use this issue to corrupt the passwd file, resulting in a denial of service. (CVE-2015-3245) It was discovered that libuse…

    first Nov 3, 2026