USN-7460-1: linux-azure-fips Ubuntu

Vulnerability summary

USN-7460-1 is a vulnerability in linux-azure-fips Ubuntu with no CVSS score yet.

Timeline

1. 24-04-2025
   PublishedVulnerability first disclosed.
2. 31-08-2026
   Last modifiedVulnerability information updated.

Description

linux-azure-fips vulnerabilities Jann Horn discovered that the watch_queue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or escalate their privileges. (CVE-2022-0995) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Microsoft Azure Network Adapter (MANA) driver; - File systems infrastructure; - NTFS3 file system; - Ethernet bridge; - Ethtool driver; - IPv6 networking; - Network traffic control; - VMware vSockets driver; (CVE-2024-26837, CVE-2024-50248, CVE-2025-21756, CVE-2025-21701, CVE-2024-50256, CVE-2025-21993, CVE-2025-21700, CVE-2025-21702, CVE-2024-56651, CVE-2025-21703, CVE-2024-46826, CVE-2024-42069)

No weakness data has been published for this record.