Stay Secure with the Latest Linux Advisories

security advisorydenial of servicememory access

Ubuntu 14.04 LTS: USN-7506-2 critical: aws kernel memory access

Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-7506-2 May 12, 2025 linux-aws vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-aws: Linux kernel for Amazon Web Services (AWS) systems Details: Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in the guest. (CVE-2022-23041) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - GPU drivers; - IIO subsystem; - Media drivers; - Network drivers; - SCSI subsystem; - SPI subsystem; - USB Gadget drivers; - Ceph distributed file system; - File systems infrastructure; - JFS file system; - Network file system (NFS) client; - Network file system (NFS) server daemon; - NILFS2 file system; - SMB network file system; - CAN network layer; - IPv6 networking; - MAC80211 subsystem; - Netfilter; - Netlink; - Network traffic control; - SCTP protocol; - TIPC protocol; (CVE-2024-56650, CVE-2024-26915, CVE-2024-50237, CVE-2024-53140, CVE-2024-26996, CVE-2021-47506, CVE-2024-26974, CVE-2025-21971, CVE-2024-56770, CVE-2024-53063, CVE-2021-47245, CVE-2024-36934, CVE-2021-47500, CVE-2024-53173, CVE-2021-47219, CVE-2024-46771, CVE-2024-56631, CVE-2024-46780, CVE-2024-35864, CVE-2021-46959, CVE-2021-47191, CVE-2021-47587, CVE-2024-53066, CVE-2024-56642, CVE-2021-47163, CVE-2024-50256, CVE-2021-47150,CVE-2024-56598, CVE-2024-26689, CVE-2023-52741, CVE-2024-49944) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS linux-image-4.4.0-1143-aws 4.4.0-1143.149 Available with Ubuntu Pro linux-image-aws 4.4.0.1143.140 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-7506-2 https://ubuntu.com/security/notices/USN-7506-1 CVE-2021-46959, CVE-2021-47150, CVE-2021-47163, CVE-2021-47191, CVE-2021-47219, CVE-2021-47245, CVE-2021-47500, CVE-2021-47506, CVE-2021-47587, CVE-2022-23041, CVE-2023-52741, CVE-2024-26689, CVE-2024-26915, CVE-2024-26974, CVE-2024-26996, CVE-2024-35864, CVE-2024-36934, CVE-2024-46771, CVE-2024-46780, CVE-2024-49944, CVE-2024-50237, CVE-2024-50256, CVE-2024-53063, CVE-2024-53066, CVE-2024-53140, CVE-2024-53173, CVE-2024-56598, CVE-2024-56631, CVE-2024-56642, CVE-2024-56650, CVE-2024-56770, CVE-2025-21971 . Uncover essential updates for the Linux kernel in Ubuntu 14.04 LTS to address hardware malfunctions and memory retrieval problems.. Linux Kernel Update, Ubuntu AWS Security, System Update Instructions. . Severity: Critical. LinuxSecurity.com Team

May 12, 2025 •Critical Ubuntu