Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 52 articles for you...
172
security advisoryUbuntusystem updateUbuntu 18.04/14.04 LTS: USN-7233-2 kernel flaws addressed
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-7233-2 January 30, 2025 linux-azure, linux-azure-4.15 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-azure-4.15: Linux kernel for Microsoft Azure Cloud systems - linux-azure: Linux kernel for Microsoft Azure Cloud systems Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Multiple devices driver; - Network drivers; - Mellanox network drivers; - S/390 drivers; - SCSI subsystem; - Sonic Silicon Backplane drivers; - File systems infrastructure; - Closures library; - Netfilter; - TIPC protocol; - VMware vSockets driver; (CVE-2024-26929, CVE-2024-40982, CVE-2024-42311, CVE-2024-53141, CVE-2024-41066, CVE-2024-38661, CVE-2024-38553, CVE-2024-43914, CVE-2024-26663, CVE-2024-42252, CVE-2024-38597, CVE-2024-53103, CVE-2024-41020, CVE-2024-41012, CVE-2024-26595) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS linux-image-4.15.0-1185-azure 4.15.0-1185.200 Available with Ubuntu Pro linux-image-azure-lts-18.04 4.15.0.1185.153 Available with Ubuntu Pro Ubuntu 14.04 LTS linux-image-4.15.0-1185-azure 4.15.0-1185.200~14.04.1 Available with Ubuntu Pro linux-image-azure 4.15.0.1185.200~14.04.1 Available with Ubuntu Pro After a standard systemupdate you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-7233-2 https://ubuntu.com/security/notices/USN-7233-1 CVE-2024-26595, CVE-2024-26663, CVE-2024-26929, CVE-2024-38553, CVE-2024-38597, CVE-2024-38661, CVE-2024-40982, CVE-2024-41012, CVE-2024-41020, CVE-2024-41066, CVE-2024-42252, CVE-2024-42311, CVE-2024-43914, CVE-2024-53103, CVE-2024-53141 . Essential enhancements for Ubuntu tackling various kernel vulnerabilities and bolstering system integrity.. Ubuntu Security Advisory, Linux Kernel Update, Azure Cloud Security. . Severity: Critical. LinuxSecurity.com Team
Jan 30, 2025
•Critical
Ubuntu
172
security advisorydenial of serviceUbuntuUbuntu 22.04 LTS USN-6461-1: Critical Kernel Flaws Fixed
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-6461-1 October 31, 2023 linux-oem-6.1 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-oem-6.1: Linux kernel for OEM systems Details: Yu Hao discovered that the UBI driver in the Linux kernel did not properly check for MTD with zero erasesize during device attachment. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2023-31085) Marek Marczykowski-Górecki discovered that the Xen event channel infrastructure implementation in the Linux kernel contained a race condition. An attacker in a guest VM could possibly use this to cause a denial of service (paravirtualized device unavailability). (CVE-2023-34324) Lucas Leong discovered that the netfilter subsystem in the Linux kernel did not properly validate some attributes passed from userspace. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2023-39189) Bien Pham discovered that the netfiler subsystem in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. A local user could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-4244) Kyle Zeng discovered that the IPv4 implementation in the Linux kernel did not properly handle socket buffers (skb) when performing IP routing in certain circumstances, leading to a null pointer dereference vulnerability. A privileged attacker could use this to cause a denial of service (system crash). (CVE-2023-42754) It was discovered that the Quick Fair Queueing scheduler implementationin the Linux kernel did not properly handle network packets in certain conditions, leading to a use after free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-4921) It was discovered that the SMB network file sharing protocol implementation in the Linux kernel did not properly handle certain error conditions, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-5345) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: linux-image-6.1.0-1025-oem 6.1.0-1025.25 linux-image-oem-22.04 6.1.0.1025.26 linux-image-oem-22.04a 6.1.0.1025.26 linux-image-oem-22.04b 6.1.0.1025.26 linux-image-oem-22.04c 6.1.0.1025.26 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-6461-1 CVE-2023-31085, CVE-2023-34324, CVE-2023-39189, CVE-2023-4244, CVE-2023-42754, CVE-2023-4921, CVE-2023-5345 Package Information: https://launchpad.net/ubuntu/+source/linux-oem-6.1/6.1.0-1025.25 . Upgrades for Ubuntu 22.04 LTS address several kernel vulnerabilities, improving system reliability and safeguarding against potential threats.. Ubuntu Security, Kernel Issues, OEM Security Notice. . Severity: Critical. LinuxSecurity.com Team
Oct 31, 2023
•Critical
Ubuntu
172
security advisorydenial of servicesecurity updateUbuntu 20.04 LTS: 5917-1 Critical Denial Of Service Threats
Several security issues were fixed in the Linux kernel.. =========================================================================Ubuntu Security Notice USN-5917-1 March 03, 2023 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-azure: Linux kernel for Microsoft Azure Cloud systems - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-gke: Linux kernel for Google Container Engine (GKE) systems - linux-gkeop: Linux kernel for Google Container Engine (GKE) systems - linux-kvm: Linux kernel for cloud environments - linux-oracle: Linux kernel for Oracle Cloud systems - linux-aws-5.4: Linux kernel for Amazon Web Services (AWS) systems - linux-azure-5.4: Linux kernel for Microsoft Azure cloud systems - linux-hwe-5.4: Linux hardware enablement (HWE) kernel - linux-oracle-5.4: Linux kernel for Oracle Cloud systems Details: It was discovered that the Upper Level Protocol (ULP) subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-0461) Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-4378) It was discovered that the NVMe driver in the Linux kernel did not properly handle resetevents in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3169) It was discovered that a use-after-free vulnerability existed in the SGI GRU driver in the Linux kernel. A local attacker could possibly use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3424) Gwangun Jung discovered a race condition in the IPv4 implementation in the Linux kernel when deleting multipath routes, resulting in an out-of-bounds read. An attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2022-3435) It was discovered that a race condition existed in the Kernel Connection Multiplexor (KCM) socket implementation in the Linux kernel when releasing sockets in certain situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3521) It was discovered that the Netronome Ethernet driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3545) It was discovered that the hugetlb implementation in the Linux kernel contained a race condition in some situations. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information (kernel memory). (CVE-2022-3623) Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36280) Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-41218) It was discovered that the Inteli915 graphics driver in the Linux kernel did not perform a GPU TLB flush in some situations. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2022-4139) It was discovered that a race condition existed in the Xen network backend driver in the Linux kernel when handling dropped packets in certain circumstances. An attacker could use this to cause a denial of service (kernel deadlock). (CVE-2022-42328, CVE-2022-42329) It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate offsets, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service (system crash). (CVE-2022-47520) It was discovered that the network queuing discipline implementation in the Linux kernel contained a null pointer dereference in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-47929) José Oliveira and Rodrigo Branco discovered that the prctl syscall implementation in the Linux kernel did not properly protect against indirect branch prediction attacks in some situations. A local attacker could possibly use this to expose sensitive information. (CVE-2023-0045) It was discovered that a use-after-free vulnerability existed in the Advanced Linux Sound Architecture (ALSA) subsystem. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-0266) Kyle Zeng discovered that the IPv6 implementation in the Linux kernel contained a NULL pointer dereference vulnerability in certain situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-0394) It was discovered that the Android Binder IPC subsystem in the Linux kernel did not properly validate inputs in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-20938) Kyle Zengdiscovered that the class-based queuing discipline implementation in the Linux kernel contained a type confusion vulnerability in some situations. An attacker could use this to cause a denial of service (system crash). (CVE-2023-23454) Kyle Zeng discovered that the ATM VC queuing discipline implementation in the Linux kernel contained a type confusion vulnerability in some situations. An attacker could use this to cause a denial of service (system crash). (CVE-2023-23455) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: linux-image-5.4.0-1065-gkeop 5.4.0-1065.69 linux-image-5.4.0-1087-kvm 5.4.0-1087.93 linux-image-5.4.0-1094-oracle 5.4.0-1094.103 linux-image-5.4.0-1095-gke 5.4.0-1095.102 linux-image-5.4.0-1097-aws 5.4.0-1097.105 linux-image-5.4.0-1101-gcp 5.4.0-1101.110 linux-image-5.4.0-1104-azure 5.4.0-1104.110 linux-image-5.4.0-144-generic 5.4.0-144.161 linux-image-5.4.0-144-generic-lpae 5.4.0-144.161 linux-image-5.4.0-144-lowlatency 5.4.0-144.161 linux-image-aws-lts-20.04 5.4.0.1097.94 linux-image-azure-lts-20.04 5.4.0.1104.97 linux-image-gcp-lts-20.04 5.4.0.1101.103 linux-image-generic 5.4.0.144.142 linux-image-generic-lpae 5.4.0.144.142 linux-image-gke 5.4.0.1095.100 linux-image-gke-5.4 5.4.0.1095.100 linux-image-gkeop 5.4.0.1065.63 linux-image-gkeop-5.4 5.4.0.1065.63 linux-image-kvm 5.4.0.1087.81 linux-image-lowlatency 5.4.0.144.142 linux-image-oem 5.4.0.144.142 linux-image-oem-osp1 5.4.0.144.142 linux-image-oracle-lts-20.04 5.4.0.1094.87 linux-image-virtual 5.4.0.144.142 Ubuntu 18.04 LTS: linux-image-5.4.0-1094-oracle 5.4.0-1094.103~18.04.1 linux-image-5.4.0-1097-aws 5.4.0-1097.105~18.04.1 linux-image-5.4.0-1104-azure 5.4.0-1104.110~18.04.1 linux-image-5.4.0-144-generic 5.4.0-144.161~18.04.1 linux-image-5.4.0-144-generic-lpae 5.4.0-144.161~18.04.1 linux-image-5.4.0-144-lowlatency 5.4.0-144.161~18.04.1 linux-image-aws 5.4.0.1097.75 linux-image-azure 5.4.0.1104.77 linux-image-generic-hwe-18.04 5.4.0.144.161~18.04.115 linux-image-generic-lpae-hwe-18.04 5.4.0.144.161~18.04.115 linux-image-lowlatency-hwe-18.04 5.4.0.144.161~18.04.115 linux-image-oem 5.4.0.144.161~18.04.115 linux-image-oem-osp1 5.4.0.144.161~18.04.115 linux-image-oracle 5.4.0.1094.103~18.04.68 linux-image-snapdragon-hwe-18.04 5.4.0.144.161~18.04.115 linux-image-virtual-hwe-18.04 5.4.0.144.161~18.04.115 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-5917-1 CVE-2022-3169, CVE-2022-3424, CVE-2022-3435, CVE-2022-3521, CVE-2022-3545, CVE-2022-3623, CVE-2022-36280, CVE-2022-41218, CVE-2022-4139, CVE-2022-42328, CVE-2022-42329, CVE-2022-4378, CVE-2022-47520, CVE-2022-47929, CVE-2023-0045, CVE-2023-0266, CVE-2023-0394, CVE-2023-0461, CVE-2023-20938, CVE-2023-23454, CVE-2023-23455 Package Information: https://launchpad.net/ubuntu/+source/linux/5.4.0-144.161 https://launchpad.net/ubuntu/+source/linux-aws/5.4.0-1097.105 https://launchpad.net/ubuntu/+source/linux-azure/5.4.0-1104.110 https://launchpad.net/ubuntu/+source/linux-gcp/5.4.0-1101.110 https://launchpad.net/ubuntu/+source/linux-gke/5.4.0-1095.102 https://launchpad.net/ubuntu/+source/linux-gkeop/5.4.0-1065.69 https://launchpad.net/ubuntu/+source/linux-kvm/5.4.0-1087.93 https://launchpad.net/ubuntu/+source/linux-oracle/5.4.0-1094.103 https://launchpad.net/ubuntu/+source/linux-aws-5.4/5.4.0-1097.105~18.04.1 https://launchpad.net/ubuntu/+source/linux-azure-5.4/5.4.0-1104.110~18.04.1 https://launchpad.net/ubuntu/+source/linux-hwe-5.4/5.4.0-144.161~18.04.1 https://launchpad.net/ubuntu/+source/linux-oracle-5.4/5.4.0-1094.103~18.04.1 . Numerous kernel vulnerabilities have been addressed on Ubuntu affecting platforms such as AWS, Azure, and others, necessitating updates and system reboots.. Kernel Flaw Update, Ubuntu Security Advisory, Linux Kernel Issues. . Severity: Critical. LinuxSecurity.com Team
Mar 03, 2023
•Critical
Ubuntu
172
security advisorydenial of servicecritical threatUbuntu 16.04 ESM USN-5684-1 Critical: Azure Kernel Flaws
Several security issues were fixed in the Linux kernel.. =========================================================================Ubuntu Security Notice USN-5684-1 October 17, 2022 linux-azure vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-azure: Linux kernel for Microsoft Azure Cloud systems Details: It was discovered that the SUNRPC RDMA protocol implementation in the Linux kernel did not properly calculate the header size of a RPC message payload. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2022-0812) Moshe Kol, Amit Klein and Yossi Gilad discovered that the IP implementation in the Linux kernel did not provide sufficient randomization when calculating port offsets. An attacker could possibly use this to expose sensitive information. (CVE-2022-1012, CVE-2022-32296) Duoming Zhou discovered that race conditions existed in the timer handling implementation of the Linux kernel's Rose X.25 protocol layer, resulting in use-after-free vulnerabilities. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-2318) Roger Pau Monné discovered that the Xen virtual block driver in the Linux kernel did not properly initialize memory pages to be used for shared communication with the backend. A local attacker could use this to expose sensitive information (guest kernel memory). (CVE-2022-26365) Roger Pau Monné discovered that the Xen paravirtualization frontend in the Linux kernel did not properly initialize memory pages to be used for shared communication with the backend. A local attacker could use this to expose sensitive information (guest kernel memory). (CVE-2022-33740) It was discovered that the Xen paravirtualization frontend in theLinux kernel incorrectly shared unrelated data when communicating with certain backends. A local attacker could use this to cause a denial of service (guest crash) or expose sensitive information (guest kernel memory). (CVE-2022-33741, CVE-2022-33742) Oleksandr Tyshchenko discovered that the Xen paravirtualization platform in the Linux kernel on ARM platforms contained a race condition in certain situations. An attacker in a guest VM could use this to cause a denial of service in the host OS. (CVE-2022-33744) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: linux-image-4.15.0-1153-azure 4.15.0-1153.168~16.04.1 linux-image-azure 4.15.0.1153.140 Ubuntu 14.04 ESM: linux-image-4.15.0-1153-azure 4.15.0-1153.168~14.04.1 linux-image-azure 4.15.0.1153.122 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-5684-1 CVE-2022-0812, CVE-2022-1012, CVE-2022-2318, CVE-2022-26365, CVE-2022-32296, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742, CVE-2022-33744 . Important security update USN-5684-1 for Ubuntu related to kernel vulnerabilities. Immediate updates required to ensure system protection.. Linux Kernel Security, Ubuntu Advisory, Azure Threats. . Severity: Critical. LinuxSecurity.com Team
Oct 17, 2022
•Critical
Ubuntu
172
security advisorydenial of servicecriticalUbuntu 20.04 LTS USN-4679-1 Critical: Linux Kernel Flaws Detected
Several security issues were fixed in the Linux kernel.. =========================================================================Ubuntu Security Notice USN-4679-1 January 06, 2021 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-azure: Linux kernel for Microsoft Azure Cloud systems - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-kvm: Linux kernel for cloud environments - linux-oracle: Linux kernel for Oracle Cloud systems - linux-raspi: Linux kernel for Raspberry Pi (V8) systems - linux-aws-5.4: Linux kernel for Amazon Web Services (AWS) systems - linux-azure-5.4: Linux kernel for Microsoft Azure cloud systems - linux-gcp-5.4: Linux kernel for Google Cloud Platform (GCP) systems - linux-gke-5.4: Linux kernel for Google Container Engine (GKE) systems - linux-hwe-5.4: Linux hardware enablement (HWE) kernel - linux-oracle-5.4: Linux kernel for Oracle Cloud systems - linux-raspi-5.4: Linux kernel for Raspberry Pi (V8) systems Details: It was discovered that the console keyboard driver in the Linux kernel contained a race condition. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2020-25656) Minh Yuan discovered that the tty driver in the Linux kernel contained race conditions when handling fonts. A local attacker could possibly use this to expose sensitive information (kernel memory). (CVE-2020-25668) Kiyin (尹亮) discovered that the perf subsystem in the Linux kernel did not properlydeallocate memory in some situations. A privileged attacker could use this to cause a denial of service (kernel memory exhaustion). (CVE-2020-25704) Jinoh Kang discovered that the Xen event channel infrastructure in the Linux kernel contained a race condition. An attacker in guest could possibly use this to cause a denial of service (dom0 crash). (CVE-2020-27675) Daniel Axtens discovered that PowerPC RTAS implementation in the Linux kernel did not properly restrict memory accesses in some situations. A privileged local attacker could use this to arbitrarily modify kernel memory, potentially bypassing kernel lockdown restrictions. (CVE-2020-27777) Minh Yuan discovered that the framebuffer console driver in the Linux kernel did not properly handle fonts in some conditions. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2020-28974) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: linux-image-5.4.0-1026-raspi 5.4.0-1026.29 linux-image-5.4.0-1031-kvm 5.4.0-1031.32 linux-image-5.4.0-1033-gcp 5.4.0-1033.35 linux-image-5.4.0-1034-aws 5.4.0-1034.35 linux-image-5.4.0-1034-oracle 5.4.0-1034.36 linux-image-5.4.0-1035-azure 5.4.0-1035.36 linux-image-5.4.0-59-generic 5.4.0-59.65 linux-image-5.4.0-59-generic-lpae 5.4.0-59.65 linux-image-5.4.0-59-lowlatency 5.4.0-59.65 linux-image-aws 5.4.0.1034.35 linux-image-azure 5.4.0.1035.33 linux-image-gcp 5.4.0.1033.42 linux-image-generic 5.4.0.59.62 linux-image-generic-lpae 5.4.0.59.62 linux-image-kvm 5.4.0.1031.29 linux-image-lowlatency 5.4.0.59.62 linux-image-oem 5.4.0.59.62 linux-image-oem-osp1 5.4.0.59.62 linux-image-oracle 5.4.0.1034.31 linux-image-raspi 5.4.0.1026.61 linux-image-raspi2 5.4.0.1026.61 linux-image-virtual 5.4.0.59.62 Ubuntu 18.04 LTS: linux-image-5.4.0-1026-raspi 5.4.0-1026.29~18.04.1 linux-image-5.4.0-1033-gcp 5.4.0-1033.35~18.04.1 linux-image-5.4.0-1033-gke 5.4.0-1033.35~18.04.1 linux-image-5.4.0-1034-aws 5.4.0-1034.35~18.04.1 linux-image-5.4.0-1034-oracle 5.4.0-1034.36~18.04.1 linux-image-5.4.0-1035-azure 5.4.0-1035.36~18.04.1 linux-image-5.4.0-59-generic 5.4.0-59.65~18.04.1 linux-image-5.4.0-59-generic-lpae 5.4.0-59.65~18.04.1 linux-image-5.4.0-59-lowlatency 5.4.0-59.65~18.04.1 linux-image-aws 5.4.0.1034.19 linux-image-azure 5.4.0.1035.17 linux-image-gcp 5.4.0.1033.21 linux-image-generic-hwe-18.04 5.4.0.59.65~18.04.54 linux-image-generic-lpae-hwe-18.04 5.4.0.59.65~18.04.54 linux-image-gke-5.4 5.4.0.1033.35~18.04.2 linux-image-lowlatency-hwe-18.04 5.4.0.59.65~18.04.54 linux-image-oem 5.4.0.59.65~18.04.54 linux-image-oem-osp1 5.4.0.59.65~18.04.54 linux-image-oracle 5.4.0.1034.36~18.04.18 linux-image-raspi-hwe-18.04 5.4.0.1026.30 linux-image-snapdragon-hwe-18.04 5.4.0.59.65~18.04.54 linux-image-virtual-hwe-18.04 5.4.0.59.65~18.04.54 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-4679-1 CVE-2020-25656, CVE-2020-25668, CVE-2020-25704, CVE-2020-27675, CVE-2020-27777,CVE-2020-28974 Package Information: https://launchpad.net/ubuntu/+source/linux/5.4.0-59.65 https://launchpad.net/ubuntu/+source/linux-aws/5.4.0-1034.35 https://launchpad.net/ubuntu/+source/linux-azure/5.4.0-1035.36 https://launchpad.net/ubuntu/+source/linux-gcp/5.4.0-1033.35 https://launchpad.net/ubuntu/+source/linux-kvm/5.4.0-1031.32 https://launchpad.net/ubuntu/+source/linux-oracle/5.4.0-1034.36 https://launchpad.net/ubuntu/+source/linux-raspi/5.4.0-1026.29 https://launchpad.net/ubuntu/+source/linux-aws-5.4/5.4.0-1034.35~18.04.1 https://launchpad.net/ubuntu/+source/linux-azure-5.4/5.4.0-1035.36~18.04.1 https://launchpad.net/ubuntu/+source/linux-gcp-5.4/5.4.0-1033.35~18.04.1 https://launchpad.net/ubuntu/+source/linux-gke-5.4/5.4.0-1033.35~18.04.1 https://launchpad.net/ubuntu/+source/linux-hwe-5.4/5.4.0-59.65~18.04.1 https://launchpad.net/ubuntu/+source/linux-oracle-5.4/5.4.0-1034.36~18.04.1 https://launchpad.net/ubuntu/+source/linux-raspi-5.4/5.4.0-1026.29~18.04.1 . Critical Linux kernel flaws for Ubuntu 20.04 and 18.04 require immediate updates to ensure system safety.. Ubuntu Kernel Security,Linux Kernel Issues,Kernel Update,Security Fix,Security Patch. . Severity: Critical. LinuxSecurity.com Team
Jan 05, 2021
•Critical
Ubuntu
87
security advisorydenial of servicecriticalDebian Stretch: DSA-4313-1 Critical: Multiple Kernel Flaws
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4313-1
Oct 08, 2018
•Critical
Debian
172
security advisorydenial of servicehigh severityUbuntu 14.04 LTS: USN-3250-1 High Severity: Kernel Crash or Code Execution
The system could be made to crash or run programs as an administrator.. =========================================================================Ubuntu Security Notice USN-3250-1 March 29, 2017 linux vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS Summary: The system could be made to crash or run programs as an administrator. Software Description: - linux: Linux kernel Details: It was discovered that the xfrm framework for transforming packets in the Linux kernel did not properly validate data received from user space. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code with administrative privileges. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS: linux-image-3.13.0-115-generic 3.13.0-115.162 linux-image-3.13.0-115-generic-lpae 3.13.0-115.162 linux-image-3.13.0-115-lowlatency 3.13.0-115.162 linux-image-3.13.0-115-powerpc-e500 3.13.0-115.162 linux-image-3.13.0-115-powerpc-e500mc 3.13.0-115.162 linux-image-3.13.0-115-powerpc-smp 3.13.0-115.162 linux-image-3.13.0-115-powerpc64-smp 3.13.0-115.162 linux-image-generic 3.13.0.115.125 linux-image-generic-lpae 3.13.0.115.125 linux-image-lowlatency 3.13.0.115.125 linux-image-powerpc-e500 3.13.0.115.125 linux-image-powerpc-e500mc 3.13.0.115.125 linux-image-powerpc-smp 3.13.0.115.125 linux-image-powerpc64-smp 3.13.0.115.125 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic,linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3250-1 CVE-2017-7184 Package Information: https://launchpad.net/ubuntu/+source/linux/3.13.0-115.162 . A recent flaw in the Linux kernel for Ubuntu enables unauthorized access and potential system instability. Users should apply the critical update immediately.. Ubuntu Kernel Update, System Security, Kernel Flaw. . LinuxSecurity.com Team
Mar 30, 2017
Ubuntu
87
security advisorydenial of serviceinformation leakDebian: DSA-3607-1 Critical: Linux Kernel DoS and Escalation Issues
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3607-1
Jun 28, 2016
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!