Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 6 articles for you...
172
security advisorycriticalUbuntuUbuntu 22.04 LTS: Linux Kernel Critical Security Vulnerability USN-7889-5
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-7889-5 December 05, 2025 linux-ibm-6.8 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-ibm-6.8: Linux kernel for IBM cloud systems Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - Network drivers; - Netfilter; - TLS protocol; (CVE-2025-21729, CVE-2025-38227, CVE-2025-38616, CVE-2025-38678) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS linux-image-6.8.0-1041-ibm 6.8.0-1041.41~22.04.1 linux-image-ibm-6.8 6.8.0-1041.41~22.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-7889-5 https://ubuntu.com/security/notices/USN-7889-4 https://ubuntu.com/security/notices/USN-7889-3 https://ubuntu.com/security/notices/USN-7889-2 https://ubuntu.com/security/notices/USN-7889-1 CVE-2025-21729, CVE-2025-38227, CVE-2025-38616, CVE-2025-38678 Package Information: https://launchpad.net/ubuntu/+source/linux-ibm-6.8/6.8.0-1041.41~22.04.1 . Severalsecurity issues in the Ubuntu Linux kernel updated; critical patch is necessary for system integrity and protection.. Ubuntu Security, Linux Kernel Fix, Critical Update, Security Advisory, System Compromise. . Severity: Critical. LinuxSecurity.com Team
Dec 05, 2025
•Critical
Ubuntu
172
security advisoryubuntulinux kernelUbuntu 22.04 LTS USN-7500-2: Security Update for Azure Kernel
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-7500-2 May 07, 2025 linux-azure-6.8 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-azure-6.8: Linux kernel for Microsoft Azure cloud systems Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Bluetooth drivers; - Microsoft Azure Network Adapter (MANA) driver; (CVE-2024-56653, CVE-2025-21953) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS linux-image-6.8.0-1028-azure 6.8.0-1028.33~22.04.1 linux-image-6.8.0-1028-azure-fde 6.8.0-1028.33~22.04.1 linux-image-azure 6.8.0-1028.33~22.04.1 linux-image-azure-fde 6.8.0-1028.33~22.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-7500-2 https://ubuntu.com/security/notices/USN-7500-1 CVE-2024-56653, CVE-2025-21953 Package Information: https://launchpad.net/ubuntu/+source/linux-azure-6.8/6.8.0-1028.33~22.04.1 . Multiple vulnerabilities in the Ubuntu 22.04 LTS Linux kernel have been addressed withcritical patches aimed specifically at Azure clients.. Linux Kernel Updates, Ubuntu Azure Security, Linux System Security. . Severity: Important. LinuxSecurity.com Team
May 07, 2025
•Important
Ubuntu
203
security advisorydenial of servicenetwork driverMageia: 2019-0107 Critical: Insufficient Validation in Network Driver
This kernel update is based on the upstream 4.14.104 and fixes atleast the following security issue: Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network . MGASA-2019-0107 - Updated kernel packages fix security vulnerability Publication date: 13 Mar 2019 URL: https://advisories.mageia.org/MGASA-2019-0107.html Type: security Affected Mageia releases: 6 CVE: CVE-2018-1000026 This kernel update is based on the upstream 4.14.104 and fixes atleast the following security issue: Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM (CVE-2018-1000026). It also fixes signal handling issues causing powertop to crash and some tracing tools to fail on execve tests. For other uptstream fixes in this update, see the referenced changelogs. References: - https://bugs.mageia.org/show_bug.cgi?id=24440 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.101 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.102 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.103 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.104 - https://www.cve.org/CVERecord?id=CVE-2018-1000026 SRPMS: - 6/core/kernel-4.14.104-2.mga6 - 6/core/kernel-userspace-headers-4.14.104-2.mga6 - 6/core/kmod-vboxadditions-5.2.24-8.mga6 - 6/core/kmod-virtualbox-5.2.24-8.mga6 - 6/core/kmod-xtables-addons-2.13-82.mga6 . MGASA-2019-0107 - Updated kernel packages fix security vulnerability Publication date: 13 Mar 2019 U. kernel, update, based, upstream, fixes, atleast, security. . Severity: Critical. LinuxSecurity.com Team
Mar 13, 2019
•Critical
Mageia
89
security advisorydenial of servicecriticalFedora 27: FEDORA-2018-7a62047e30 Critical: Denial Of Service
The 4.15.4 update contains a number of important fixes across the tree. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-7a62047e30 2018-02-23 15:59:46.792006 --------------------------------------------------------------------------------Name : kernel Product : Fedora 27 Version : 4.15.4 Release : 300.fc27 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package --------------------------------------------------------------------------------Update Information: The 4.15.4 update contains a number of important fixes across the tree --------------------------------------------------------------------------------References: [ 1 ] Bug #1541846 - CVE-2018-1000026 kernel: Improper validation in bnx2x network card driver can allow for denial of service attacks via crafted packet https://bugzilla.redhat.com/show_bug.cgi?id=1541846 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade kernel' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Feb 23, 2018
•Critical
Fedora
98
security advisorysecurity issueRed HatRed Hat 6: RHSA-2015:1043-01 Important: Network Driver Vulnerability Fix
An updated virtio-win package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: virtio-win security and bug fix update Advisory ID: RHSA-2015:1043-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://access.redhat.com/errata/RHSA-2015:1043.html Issue date: 2015-06-03 CVE Names: CVE-2015-3215 ==================================================================== 1. Summary: An updated virtio-win package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 6) - noarch Red Hat Enterprise Linux Server Supplementary (v. 6) - noarch Red Hat Enterprise Linux Workstation Supplementary (v. 6) - noarch 3. Description: The virtio-win package provides paravirtualized network drivers for most Microsoft Windows operating systems. Paravirtualized drivers are virtualization-aware drivers used by fully virtualized guests running on Red Hat Enterprise Linux. Fully virtualized guests using the paravirtualized drivers gain significantly better I/O performance than fully virtualized guests running without the drivers. It was found that the Windows Virtio NIC driver did not sufficiently sanitize the length of the incoming IP packets, as demonstrated by a packet with IP options present but the overall packetlength not being adjusted to reflect the length of those options. A remote attacker able to send a specially crafted IP packet to the guest could use this flaw to crash that guest. (CVE-2015-3215) Red Hat would like to thank Google Project Zero for reporting this issue. This update also fixes the following bugs: * When creating a Windows guest using virtio drivers and direct Logical Unit Number (LUN) access with more than 4 SCSI disks under one virtio-scsi-pci controller, the guest terminated unexpectedly with a stop error, also known as the blue screen of death. This update increases the maximum amount of LUNs per a single virtio-scsi-pci controller has been increased to 254, which prevents the described crash from occurring. (BZ#1210196) * The license.txt file in the virtio-win build has been updated to include the correct year number in the copyright information section. (BZ#1210195) All virtio-win users are advised to upgrade to this updated package, which contains backported patches to correct these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1227634 - CVE-2015-3215 virtio-win: netkvm: malformed packet can cause BSOD 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 6): noarch: virtio-win-1.7.4-1.el6_6.noarch.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): noarch: virtio-win-1.7.4-1.el6_6.noarch.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): noarch: virtio-win-1.7.4-1.el6_6.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2015-3215 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat securitycontact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVbtnyXlSAg2UNWIIRAktHAJ9G4wCxjVy19ykFvCA96CKZyX/cxwCeL9WG aC0UiYGeb9CdnBWwWCoMjPo=C3CV -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Jun 03, 2015
•Important
Red Hat
98
security advisorysecurity issuebug fixRed Hat 7: RHSA-2015:1044-01 Important Update: Virtio-Win Network Driver
An updated virtio-win package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having Important security [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Important: virtio-win security and bug fix update Advisory ID: RHSA-2015:1044-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://access.redhat.com/errata/RHSA-2015:1044.html Issue date: 2015-06-03 CVE Names: CVE-2015-3215 ==================================================================== 1. Summary: An updated virtio-win package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client Supplementary (v. 7) - noarch Red Hat Enterprise Linux Server Supplementary (v. 7) - noarch Red Hat Enterprise Linux Workstation Supplementary (v. 7) - noarch 3. Description: The virtio-win package provides paravirtualized network drivers for most Microsoft Windows operating systems. Paravirtualized drivers are virtualization-aware drivers used by fully virtualized guests running on Red Hat Enterprise Linux. Fully virtualized guests using the paravirtualized drivers gain significantly better I/O performance than fully virtualized guests running without the drivers. It was found that the Windows Virtio NIC driver did not sufficiently sanitize the length of the incoming IP packets, as demonstrated by a packet with IP options present but the overall packet length not being adjusted to reflect the length of those options. A remote attacker able to send a speciallycrafted IP packet to the guest could use this flaw to crash that guest. (CVE-2015-3215) Red Hat would like to thank Google Project Zero for reporting this issue. This update also fixes the following bugs: * When creating a Windows guest using virtio drivers and direct Logical Unit Number (LUN) access with more than 4 SCSI disks under one virtio-scsi-pci controller, the guest terminated unexpectedly with a stop error, also known as the blue screen of death. This update increases the maximum amount of LUNs per a single virtio-scsi-pci controller has been increased to 254, which prevents the described crash from occurring. (BZ#1207546) * The license.txt file in the virtio-win build has been updated to include the correct year number in the copyright information section. (BZ#1183427) All virtio-win users are advised to upgrade to this updated package, which contains backported patches to correct these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1227634 - CVE-2015-3215 virtio-win: netkvm: malformed packet can cause BSOD 6. Package List: Red Hat Enterprise Linux Client Supplementary (v. 7): noarch: virtio-win-1.7.4-1.el7.noarch.rpm Red Hat Enterprise Linux Server Supplementary (v. 7): noarch: virtio-win-1.7.4-1.el7.noarch.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 7): noarch: virtio-win-1.7.4-1.el7.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-3215 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat,Inc. . The latest virtio-win update addresses a significant vulnerability and incorporates vital stability improvements for Red Hat platforms.. Virtio-Win Update, Red Hat Security, Important Advisory, Network Driver Fix. . Severity: Important. LinuxSecurity.com Team
Jun 03, 2015
•Important
Red Hat
98
security advisorybug fiximportantRed Hat Enterprise 6: RHSA-2015:1043-01 Critical virtio-win Network Threat
An updated virtio-win package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Important: virtio-win security and bug fix update Advisory ID: RHSA-2015:1043-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://access.redhat.com/errata/RHSA-2015:1043.html Issue date: 2015-06-03 CVE Names: CVE-2015-3215 ==================================================================== 1. Summary: An updated virtio-win package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 6) - noarch Red Hat Enterprise Linux Server Supplementary (v. 6) - noarch Red Hat Enterprise Linux Workstation Supplementary (v. 6) - noarch 3. Description: The virtio-win package provides paravirtualized network drivers for most Microsoft Windows operating systems. Paravirtualized drivers are virtualization-aware drivers used by fully virtualized guests running on Red Hat Enterprise Linux. Fully virtualized guests using the paravirtualized drivers gain significantly better I/O performance than fully virtualized guests running without the drivers. It was found that the Windows Virtio NIC driver did not sufficiently sanitize the length of the incoming IP packets, as demonstrated by a packet with IP options present but the overall packet length not being adjusted to reflect the length of those options. A remote attacker able to send a speciallycrafted IP packet to the guest could use this flaw to crash that guest. (CVE-2015-3215) Red Hat would like to thank Google Project Zero for reporting this issue. This update also fixes the following bugs: * When creating a Windows guest using virtio drivers and direct Logical Unit Number (LUN) access with more than 4 SCSI disks under one virtio-scsi-pci controller, the guest terminated unexpectedly with a stop error, also known as the blue screen of death. This update increases the maximum amount of LUNs per a single virtio-scsi-pci controller has been increased to 254, which prevents the described crash from occurring. (BZ#1210196) * The license.txt file in the virtio-win build has been updated to include the correct year number in the copyright information section. (BZ#1210195) All virtio-win users are advised to upgrade to this updated package, which contains backported patches to correct these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1227634 - CVE-2015-3215 virtio-win: netkvm: malformed packet can cause BSOD 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 6): noarch: virtio-win-1.7.4-1.el6_6.noarch.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): noarch: virtio-win-1.7.4-1.el6_6.noarch.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): noarch: virtio-win-1.7.4-1.el6_6.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-3215 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 RedHat, Inc. . Red Hat issues a significant virtio-win security bulletin tackling network adapter vulnerabilities and delivering bug resolutions for RHEL.. Red Hat Enterprise, virtio-win, security advisory, network driver, bug fix. . Severity: Important. LinuxSecurity.com Team
Jun 03, 2015
•Important
Red Hat
172
security advisorysystem updateubuntuUbuntu 10.04 LTS USN-1575-1 Critical Linux Kernel DoS Threat
Several security issues were fixed in the kernel.. =========================================================================Ubuntu Security Notice USN-1575-1 September 19, 2012 linux-lts-backport-oneiric vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 10.04 LTS Summary: Several security issues were fixed in the kernel. Software Description: - linux-lts-backport-oneiric: Linux kernel backport from Oneiric Details: Ben Hutchings reported a flaw in the Linux kernel with some network drivers that support TSO (TCP segment offload). A local or peer user could exploit this flaw to to cause a denial of service. (CVE-2012-3412) Jay Fenlason and Doug Ledford discovered a bug in the Linux kernel implementation of RDS sockets. A local unprivileged user could potentially use this flaw to read privileged information from the kernel. (CVE-2012-3430) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 10.04 LTS: linux-image-3.0.0-26-generic 3.0.0-26.42~lucid1 linux-image-3.0.0-26-generic-pae 3.0.0-26.42~lucid1 linux-image-3.0.0-26-server 3.0.0-26.42~lucid1 linux-image-3.0.0-26-virtual 3.0.0-26.42~lucid1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use linux-restricted-modules, you have to update that package as well to get modules which work with the new kernel version. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-1575-1 CVE-2012-3412, CVE-2012-3430 Package Information: https://launchpad.net/ubuntu/+source/linux-lts-backport-oneiric/3.0.0-26.42~lucid1 . Various vulnerabilities resolved in Ubuntu's Oneiric kernel, necessitating prompt system updates for safeguarding.. Linux Kernel Security, System Updates, Oneiric Backport. . Severity: Critical. LinuxSecurity.com Team
Sep 19, 2012
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!