Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Ubuntu 22.04 LTS USN-7597-2 critical: linux-azure-fips access issue

ubuntu
Calendar Grey June 24, 2025
Dist Ubuntu Esm H88
A number of vulnerabilities have been addressed in the Linux kernel for Azure FIPS within Ubuntu 22.04 LTS, notably including a permissions oversight.
Several security issues were fixed in the Linux kernel.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-azure-fips: Linux kernel for Microsoft Azure Cloud systems with FIPS Details: Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - x86 architecture; - ACPI drivers; - Clock framework and drivers; - GPU drivers; - HID subsystem; - InfiniBand drivers; - Media drivers; - MemoryStick subsystem; - Network drivers; - Mellanox network drivers; ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory access control important kernel ubuntu linux-azure-fips

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS linux-image-5.15.0-1091-azure-fips 5.15.0-1091.100+fips1 Available with Ubuntu Pro linux-image-azure-fips 5.15.0.1091.76 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.

References

https://ubuntu.com/security/notices/USN-7597-2

https://ubuntu.com/security/notices/USN-7597-1

CVE-2022-49636, CVE-2022-49728, CVE-2023-53034, CVE-2024-36945,

CVE-2024-42230, CVE-2024-46753, CVE-2024-46812, CVE-2024-46821,

CVE-2024-53144, CVE-2024-56664, CVE-2024-58093, CVE-2024-8805,

CVE-2025-21941, CVE-2025-21956, CVE-2025-21957, CVE-2025-21959,

CVE-2025-21962, CVE-2025-21963, CVE-2025-21964, CVE-2025-21968,

CVE-2025-21970, CVE-2025-21975, CVE-2025-21981, CVE-2025-21991,

CVE-2025-21992, CVE-2025-21994, CVE-2025-21996, CVE-2025-21999,

CVE-2025-22004, CVE-2025-22005, CVE-2025-22007, CVE-2025-22008,

CVE-2025-22010, CVE-2025-22014, CVE-2025-22018, CVE-2025-22020,

CVE-2025-22021, CVE-2025-22025, CVE-2025-22035, CVE-2025-22044,

CVE-2025-22045, CVE-2025-22050, CVE-2025-22054, CVE-2025-22055,

CVE-2025-22056, CVE-2025-22060, CVE-2025-22063, CVE-2025-22066,

CVE-2025-22071, CVE-2025-22073, CVE-2025-22075, CVE-2025-22079,

CVE-2025-22081, CVE-2025-22086, CVE-2025-22089, CVE-2025-22097,

CVE-2025-23136, CVE-2025-23138, CVE-2025-37785, CVE-2025-37889,

CVE-2025-37937, CVE-2025-38152, CVE-2025-38575, CVE-2025-38637,

CVE-2025-39728, CVE-2025-39735

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7597-2

Topics%20covered

Topics Covered

security advisory access control important kernel ubuntu linux-azure-fips

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here