Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
219
security advisorymoderatenfs-utilsMajor Security Vulnerability Discovered in nginx-configuration for RHEL 9
Moderate: nfs-utils security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:3938", "synopsis": "Moderate: nfs-utils security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for nfs-utils.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs. \n\nSecurity Fix(es):\n\n* nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2413081", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2413081", "description": ""}], "cves": [{"name": "CVE-2025-12801", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2025-12801", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cvss3BaseScore": "6.5", "cwe": "CWE-279"}], "references": [], "publishedAt": "2026-03-10T12:00:51.199586Z", "rpms": {"Rocky Linux 8": {"nvras": ["libnfsidmap-1:2.3.3-68.el8_10.aarch64.rpm", "libnfsidmap-1:2.3.3-68.el8_10.i686.rpm", "libnfsidmap-1:2.3.3-68.el8_10.x86_64.rpm", "libnfsidmap-debuginfo-1:2.3.3-68.el8_10.aarch64.rpm", "libnfsidmap-debuginfo-1:2.3.3-68.el8_10.i686.rpm", "libnfsidmap-debuginfo-1:2.3.3-68.el8_10.x86_64.rpm", "libnfsidmap-devel-1:2.3.3-68.el8_10.aarch64.rpm", "libnfsidmap-devel-1:2.3.3-68.el8_10.i686.rpm", "libnfsidmap-devel-1:2.3.3-68.el8_10.x86_64.rpm", "nfs-utils-1:2.3.3-68.el8_10.aarch64.rpm","nfs-utils-1:2.3.3-68.el8_10.src.rpm", "nfs-utils-1:2.3.3-68.el8_10.x86_64.rpm", "nfs-utils-debuginfo-1:2.3.3-68.el8_10.aarch64.rpm", "nfs-utils-debuginfo-1:2.3.3-68.el8_10.i686.rpm", "nfs-utils-debuginfo-1:2.3.3-68.el8_10.x86_64.rpm", "nfs-utils-debugsource-1:2.3.3-68.el8_10.aarch64.rpm", "nfs-utils-debugsource-1:2.3.3-68.el8_10.i686.rpm", "nfs-utils-debugsource-1:2.3.3-68.el8_10.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. A moderate security advisory for nfs-utils update on Rocky Linux addressing a rpc privilege escalation issue.. NFS Utils Update, RPC Privilege Escalation, Rocky Linux Security Advisory. . LinuxSecurity.com Team
Mar 10, 2026
Rocky Linux
172
security advisoryUbuntuimportantUbuntu 22.04 LTS Kernel Security Advisory USN-8013-4 CVE-2025-38561
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-8013-4 February 11, 2026 linux-aws-5.15, linux-gcp-5.15, linux-nvidia-tegra-igx, linux-oracle-5.15, linux-xilinx-zynqmp vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-nvidia-tegra-igx: Linux kernel for NVIDIA Tegra IGX systems - linux-xilinx-zynqmp: Linux kernel for Xilinx ZynqMP processors - linux-aws-5.15: Linux kernel for Amazon Web Services (AWS) systems - linux-gcp-5.15: Linux kernel for Google Cloud Platform (GCP) systems - linux-oracle-5.15: Linux kernel for Oracle Cloud systems Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; (CVE-2025-38561, CVE-2025-40019) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS linux-image-5.15.0-1040-nvidia-tegra-igx 5.15.0-1040.40 linux-image-5.15.0-1040-nvidia-tegra-igx-rt 5.15.0-1040.40 linux-image-5.15.0-1063-xilinx-zynqmp 5.15.0-1063.67 linux-image-nvidia-tegra-igx 5.15.0.1040.42 linux-image-nvidia-tegra-igx-5.15 5.15.0.1040.42 linux-image-nvidia-tegra-igx-rt 5.15.0.1040.42 linux-image-nvidia-tegra-igx-rt-5.15 5.15.0.1040.42 linux-image-xilinx-zynqmp 5.15.0.1063.66 linux-image-xilinx-zynqmp-5.15 5.15.0.1063.66 Ubuntu 20.04 LTS linux-image-5.15.0-1096-oracle 5.15.0-1096.102~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-1099-aws 5.15.0-1099.106~20.04.1 Availablewith Ubuntu Pro linux-image-5.15.0-1099-gcp 5.15.0-1099.108~20.04.1 Available with Ubuntu Pro linux-image-aws 5.15.0.1099.106~20.04.1 Available with Ubuntu Pro linux-image-aws-5.15 5.15.0.1099.106~20.04.1 Available with Ubuntu Pro linux-image-gcp 5.15.0.1099.108~20.04.1 Available with Ubuntu Pro linux-image-gcp-5.15 5.15.0.1099.108~20.04.1 Available with Ubuntu Pro linux-image-oracle 5.15.0.1096.102~20.04.1 Available with Ubuntu Pro linux-image-oracle-5.15 5.15.0.1096.102~20.04.1 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8013-4 https://ubuntu.com/security/notices/USN-8013-3 https://ubuntu.com/security/notices/USN-8013-2 https://ubuntu.com/security/notices/USN-8013-1 CVE-2025-38561, CVE-2025-40019 Package Information: https://launchpad.net/ubuntu/+source/linux-nvidia-tegra-igx/5.15.0-1040.40 https://launchpad.net/ubuntu/+source/linux-xilinx-zynqmp/5.15.0-1063.67 . Fixes in several security issues for Linux kernel in Ubuntu 22.04 and 20.04 addresses potential system compromises.. Linux kernel security issues Ubuntu patch updates. . Severity: Important. LinuxSecurity.com Team
Feb 11, 2026
•Important
Ubuntu
172
security advisorycriticalUbuntuUbuntu 22.04 LTS USN-8013-1 Linux Kernel Critical Security Issues
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-8013-1 February 04, 2026 linux, linux-aws, linux-azure, linux-azure-5.15, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-azure: Linux kernel for Microsoft Azure Cloud systems - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-gke: Linux kernel for Google Container Engine (GKE) systems - linux-gkeop: Linux kernel for Google Container Engine (GKE) systems - linux-ibm: Linux kernel for IBM cloud systems - linux-intel-iotg: Linux kernel for Intel IoT platforms - linux-kvm: Linux kernel for cloud environments - linux-lowlatency: Linux low latency kernel - linux-nvidia: Linux kernel for NVIDIA systems - linux-nvidia-tegra: Linux kernel for NVIDIA Tegra systems - linux-oracle: Linux kernel for Oracle Cloud systems - linux-raspi: Linux kernel for Raspberry Pi systems - linux-azure-5.15: Linux kernel for Microsoft Azure cloud systems - linux-hwe-5.15: Linux hardware enablement (HWE) kernel - linux-ibm-5.15: Linux kernel for IBM cloud systems - linux-intel-iotg-5.15: Linux kernel for Intel IoT platforms - linux-lowlatency-hwe-5.15: Linux low latency kernel - linux-nvidia-tegra-5.15: Linux kernel for NVIDIA Tegra systems Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise thesystem. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; (CVE-2025-38561, CVE-2025-40019) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS linux-image-5.15.0-1051-nvidia-tegra 5.15.0-1051.51 linux-image-5.15.0-1051-nvidia-tegra-rt 5.15.0-1051.51 linux-image-5.15.0-1082-gkeop 5.15.0-1082.90 linux-image-5.15.0-1091-kvm 5.15.0-1091.96 linux-image-5.15.0-1093-ibm 5.15.0-1093.96 linux-image-5.15.0-1093-raspi 5.15.0-1093.96 linux-image-5.15.0-1094-intel-iotg 5.15.0-1094.100 linux-image-5.15.0-1094-nvidia 5.15.0-1094.95 linux-image-5.15.0-1094-nvidia-lowlatency 5.15.0-1094.95 linux-image-5.15.0-1095-gke 5.15.0-1095.101 linux-image-5.15.0-1096-oracle 5.15.0-1096.102 linux-image-5.15.0-1099-aws 5.15.0-1099.106 linux-image-5.15.0-1099-aws-64k 5.15.0-1099.106 linux-image-5.15.0-1099-gcp 5.15.0-1099.108 linux-image-5.15.0-1103-azure 5.15.0-1103.112 linux-image-5.15.0-168-generic 5.15.0-168.178 linux-image-5.15.0-168-generic-64k 5.15.0-168.178 linux-image-5.15.0-168-generic-lpae 5.15.0-168.178 linux-image-5.15.0-168-lowlatency 5.15.0-168.178 linux-image-5.15.0-168-lowlatency-64k 5.15.0-168.178 linux-image-aws-5.15 5.15.0.1099.102 linux-image-aws-64k-5.15 5.15.0.1099.102 linux-image-aws-64k-lts-22.04 5.15.0.1099.102 linux-image-aws-lts-22.04 5.15.0.1099.102 linux-image-azure-5.15 5.15.0.1103.101 linux-image-azure-lts-22.04 5.15.0.1103.101 linux-image-gcp-5.15 5.15.0.1099.95 linux-image-gcp-lts-22.04 5.15.0.1099.95 linux-image-generic 5.15.0.168.159 linux-image-generic-5.15 5.15.0.168.159 linux-image-generic-64k 5.15.0.168.159 linux-image-generic-64k-5.15 5.15.0.168.159 linux-image-generic-lpae 5.15.0.168.159 linux-image-generic-lpae-5.15 5.15.0.168.159 linux-image-gke 5.15.0.1095.94 linux-image-gke-5.15 5.15.0.1095.94 linux-image-gkeop 5.15.0.1082.81 linux-image-gkeop-5.15 5.15.0.1082.81 linux-image-ibm 5.15.0.1093.89 linux-image-ibm-5.15 5.15.0.1093.89 linux-image-intel-iotg 5.15.0.1094.94 linux-image-intel-iotg-5.15 5.15.0.1094.94 linux-image-kvm 5.15.0.1091.87 linux-image-kvm-5.15 5.15.0.1091.87 linux-image-lowlatency 5.15.0.168.142 linux-image-lowlatency-5.15 5.15.0.168.142 linux-image-lowlatency-64k 5.15.0.168.142 linux-image-lowlatency-64k-5.15 5.15.0.168.142 linux-image-nvidia 5.15.0.1094.94 linux-image-nvidia-5.15 5.15.0.1094.94 linux-image-nvidia-lowlatency 5.15.0.1094.94 linux-image-nvidia-lowlatency-5.15 5.15.0.1094.94 linux-image-nvidia-tegra 5.15.0.1051.51 linux-image-nvidia-tegra-5.15 5.15.0.1051.51 linux-image-nvidia-tegra-rt 5.15.0.1051.51 linux-image-nvidia-tegra-rt-5.15 5.15.0.1051.51 linux-image-oracle-5.15 5.15.0.1096.92 linux-image-oracle-lts-22.04 5.15.0.1096.92 linux-image-raspi 5.15.0.1093.91 linux-image-raspi-5.15 5.15.0.1093.91 linux-image-raspi-nolpae 5.15.0.1093.91 linux-image-virtual 5.15.0.168.159 linux-image-virtual-5.15 5.15.0.168.159 Ubuntu 20.04 LTS linux-image-5.15.0-1051-nvidia-tegra 5.15.0-1051.51~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-1051-nvidia-tegra-rt 5.15.0-1051.51~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-1093-ibm 5.15.0-1093.96~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-1094-intel-iotg 5.15.0-1094.100~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-1103-azure 5.15.0-1103.112~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-168-generic 5.15.0-168.178~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-168-generic-64k 5.15.0-168.178~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-168-generic-lpae 5.15.0-168.178~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-168-lowlatency 5.15.0-168.178~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-168-lowlatency-64k 5.15.0-168.178~20.04.1 Available with Ubuntu Pro linux-image-azure 5.15.0.1103.112~20.04.1 Available with Ubuntu Pro linux-image-azure-5.15 5.15.0.1103.112~20.04.1 Available with Ubuntu Pro linux-image-azure-cvm 5.15.0.1103.112~20.04.1 Available with Ubuntu Pro linux-image-generic-5.15 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-generic-64k-5.15 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-generic-64k-hwe-20.04 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-generic-hwe-20.04 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-generic-lpae-5.15 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-generic-lpae-hwe-20.04 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-ibm 5.15.0.1093.96~20.04.1 Available with Ubuntu Pro linux-image-ibm-5.15 5.15.0.1093.96~20.04.1 Available with Ubuntu Pro linux-image-intel 5.15.0.1094.100~20.04.1 Available with Ubuntu Pro linux-image-intel-iotg 5.15.0.1094.100~20.04.1 Available with Ubuntu Pro linux-image-intel-iotg-5.15 5.15.0.1094.100~20.04.1 Available with Ubuntu Pro linux-image-lowlatency-5.15 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-lowlatency-64k-5.15 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-lowlatency-64k-hwe-20.04 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-lowlatency-hwe-20.04 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-nvidia-tegra 5.15.0.1051.51~20.04.1 Available with Ubuntu Pro linux-image-nvidia-tegra-5.15 5.15.0.1051.51~20.04.1 Available with Ubuntu Pro linux-image-nvidia-tegra-rt 5.15.0.1051.51~20.04.1 Available with Ubuntu Pro linux-image-nvidia-tegra-rt-5.15 5.15.0.1051.51~20.04.1 Available with Ubuntu Pro linux-image-oem-20.04 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-oem-20.04b 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-oem-20.04c 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-oem-20.04d 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-virtual-5.15 5.15.0.168.178~20.04.1 Available with Ubuntu Pro linux-image-virtual-hwe-20.04 5.15.0.168.178~20.04.1 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all thenecessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8013-1 CVE-2025-38561, CVE-2025-40019 Package Information: https://launchpad.net/ubuntu/+source/linux/5.15.0-168.178 https://launchpad.net/ubuntu/+source/linux-aws/5.15.0-1099.106 https://launchpad.net/ubuntu/+source/linux-azure/5.15.0-1103.112 https://launchpad.net/ubuntu/+source/linux-gcp/5.15.0-1099.108 https://launchpad.net/ubuntu/+source/linux-gke/5.15.0-1095.101 https://launchpad.net/ubuntu/+source/linux-gkeop/5.15.0-1082.90 https://launchpad.net/ubuntu/+source/linux-ibm/5.15.0-1093.96 https://launchpad.net/ubuntu/+source/linux-intel-iotg/5.15.0-1094.100 https://launchpad.net/ubuntu/+source/linux-kvm/5.15.0-1091.96 https://launchpad.net/ubuntu/+source/linux-lowlatency/5.15.0-168.178 https://launchpad.net/ubuntu/+source/linux-nvidia/5.15.0-1094.95 https://launchpad.net/ubuntu/+source/linux-nvidia-tegra/5.15.0-1051.51 https://launchpad.net/ubuntu/+source/linux-oracle/5.15.0-1096.102 https://launchpad.net/ubuntu/+source/linux-raspi/5.15.0-1093.96 . Several critical security flaws in the Linux kernel on Ubuntu fixed; upgrade recommended for improved system security.. Linux Kernel Ubuntu Security Update Attack Prevention. . Severity: Critical. LinuxSecurity.com Team
Feb 04, 2026
•Critical
Ubuntu
172
security advisoryUbuntuLinux kernelUbuntu 14.04 LTS: Linux Kernel Security Update USN-7685-2 CVE-2024-50073
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-7685-2 August 05, 2025 linux-azure vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-azure: Linux kernel for Microsoft Azure Cloud systems Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - Ext4 file system; - SMB network file system; - Bluetooth subsystem; - Network traffic control; - Sun RPC protocol; - USB sound devices; (CVE-2023-52975, CVE-2024-38541, CVE-2024-50073, CVE-2024-53239, CVE-2023-52757, CVE-2024-49883, CVE-2025-37797, CVE-2023-52885, CVE-2024-49950, CVE-2024-56748) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS linux-image-4.15.0-1191-azure 4.15.0-1191.206~14.04.1 Available with Ubuntu Pro linux-image-azure 4.15.0.1191.206~14.04.1 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. After a standard system update you need to rebootyour computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7685-2 https://ubuntu.com/security/notices/USN-7685-1 CVE-2023-52757, CVE-2023-52885, CVE-2023-52975, CVE-2024-38541, CVE-2024-49883, CVE-2024-49950, CVE-2024-50073, CVE-2024-53239, CVE-2024-56748, CVE-2025-37797 . Numerous vulnerabilities identified in the Ubuntu Linux kernel necessitate prompt patching to ensure system security and safeguard information.. Ubuntu kernel update, Azure cloud security, Linux patch management. . Severity: Critical. LinuxSecurity.com Team
Aug 05, 2025
•Critical
Ubuntu
172
security advisoryUbuntuimportantUbuntu 20.04 LTS: USN-7671-3 Linux Kernel Important Security Update
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-7671-3 August 04, 2025 linux-iot vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-iot: Linux kernel for IoT platforms Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ACPI drivers; - GPU drivers; - SMB network file system; - Memory management; - Netfilter; - Network traffic control; (CVE-2024-53051, CVE-2024-46787, CVE-2024-50047, CVE-2024-56662, CVE-2025-37890, CVE-2025-38001, CVE-2025-37997, CVE-2025-37932, CVE-2025-37798, CVE-2025-38177, CVE-2025-38000) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS linux-image-5.4.0-1052-iot 5.4.0-1052.55 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-7671-3 https://ubuntu.com/security/notices/USN-7671-2 https://ubuntu.com/security/notices/USN-7671-1 CVE-2024-46787, CVE-2024-50047, CVE-2024-53051,CVE-2024-56662, CVE-2025-37798, CVE-2025-37890, CVE-2025-37932, CVE-2025-37997, CVE-2025-38000, CVE-2025-38001, CVE-2025-38177 . Numerous vulnerabilities in the Linux kernel affecting IoT devices addressed in Ubuntu 20.04 LTS. Prompt measures needed.. Linux kernel, IoT security, Ubuntu patch, kernel vulnerabilities, system update. . Severity: Important. LinuxSecurity.com Team
Aug 04, 2025
•Important
Ubuntu
172
security advisorycriticalUbuntuUbuntu 22.04 LTS USN-7591-5 critical: Linux kernel Intel IoT issues
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-7591-5 July 04, 2025 linux-intel-iotg vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-intel-iotg: Linux kernel for Intel IoT platforms Details: Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805) It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - x86 architecture; - ACPI drivers; - Clock framework and drivers; - GPU drivers; - HID subsystem; - InfiniBand drivers; - Media drivers; - MemoryStick subsystem; - Network drivers; - Mellanox network drivers; - NTB driver; - PCI subsystem; - Voltage and Current Regulator drivers; - Remote Processor subsystem; - SCSI subsystem; - QCOM SoC drivers; - Thermal drivers; - BTRFS file system; - Ext4 file system; - JFS file system; - Network file system (NFS) server daemon; - NTFS3 file system; - File systems infrastructure; - Proc file system; - SMB network file system; - IPv6 networking; - RDMA verbs API; - SoC audio core drivers; - Tracing infrastructure; -Watch queue notification mechanism; - 802.1Q VLAN protocol; - Asynchronous Transfer Mode (ATM) subsystem; - Bluetooth subsystem; - Networking core; - IPv4 networking; - Netfilter; - Network traffic control; - SMC sockets; - SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025, CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054, CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981, CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994, CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035, CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575, CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044, CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075, CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056, CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063, CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045, CVE-2025-22018) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS linux-image-5.15.0-1081-intel-iotg 5.15.0-1081.87 linux-image-intel-iotg 5.15.0.1081.81 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE,linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-7591-5 https://ubuntu.com/security/notices/USN-7591-4 https://ubuntu.com/security/notices/USN-7591-3 https://ubuntu.com/security/notices/USN-7591-2 https://ubuntu.com/security/notices/USN-7591-1 CVE-2022-49636, CVE-2022-49728, CVE-2023-53034, CVE-2024-36945, CVE-2024-42230, CVE-2024-46753, CVE-2024-46812, CVE-2024-46821, CVE-2024-53144, CVE-2024-56664, CVE-2024-58093, CVE-2024-8805, CVE-2025-21941, CVE-2025-21956, CVE-2025-21957, CVE-2025-21959, CVE-2025-21962, CVE-2025-21963, CVE-2025-21964, CVE-2025-21968, CVE-2025-21970, CVE-2025-21975, CVE-2025-21981, CVE-2025-21991, CVE-2025-21992, CVE-2025-21994, CVE-2025-21996, CVE-2025-21999, CVE-2025-22004, CVE-2025-22005, CVE-2025-22007, CVE-2025-22008, CVE-2025-22010, CVE-2025-22014, CVE-2025-22018, CVE-2025-22020, CVE-2025-22021, CVE-2025-22025, CVE-2025-22035, CVE-2025-22044, CVE-2025-22045, CVE-2025-22050, CVE-2025-22054, CVE-2025-22055, CVE-2025-22056, CVE-2025-22060, CVE-2025-22063, CVE-2025-22066, CVE-2025-22071, CVE-2025-22073, CVE-2025-22075, CVE-2025-22079, CVE-2025-22081, CVE-2025-22086, CVE-2025-22089, CVE-2025-22097, CVE-2025-2312, CVE-2025-23136, CVE-2025-23138, CVE-2025-37785, CVE-2025-37889, CVE-2025-37937, CVE-2025-38152, CVE-2025-38575, CVE-2025-38637, CVE-2025-39728, CVE-2025-39735 Package Information: https://launchpad.net/ubuntu/+source/linux-intel-iotg/5.15.0-1081.87 . Several significant vulnerabilities addressed in Ubuntu's Linux kernel affecting Intel IoT devices. Ensure your systems are updated without delay.. Linux kernel security, Ubuntu security update, Intel IoT vulnerabilities, kernel patching, improper access control. . Severity: Critical. LinuxSecurity.com Team
Jul 04, 2025
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!