USN-7393-1: Linux kernel (FIPS) vulnerabilities

Releases

• Ubuntu 20.04 LTS

Packages

• linux-fips - Linux kernel with FIPS

Details

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel
contained a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2024-23848)

Attila Szász discovered that the HFS+ file system implementation in the
Linux Kernel contained a heap overflow vulnerability. An attacker could use
a specially crafted file system image that, when mounted, could cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2025-0927)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• Virtio block driver;
• TPM device driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I2C subsystem;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• LED subsystem;
• Mailbox framework;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• Virtio pmem driver;
• NVME drivers;
• Parport drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• USB Device Class drivers;
• USB Gadget drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• BTRFS file system;
• Ceph distributed file system;
• Ext4 file system;
• F2FS file system;
• GFS2 file system;
• File systems infrastructure;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• Network traffic control;
• Network sockets;
• TCP network protocol;
• Kernel init infrastructure;
• BPF subsystem;
• Kernel CPU control infrastructure;
• Perf events;
• Arbitrary resource management;
• Tracing infrastructure;
• Closures library;
• Memory management;
• 9P file system network protocol;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Ethernet bridge;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• IEEE 802.15.4 subsystem;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• SCTP protocol;
• Sun RPC protocol;
• TIPC protocol;
• Wireless networking;
• eXpress Data Path;
• XFRM subsystem;
• Key management;
• SELinux security module;
• FireWire sound drivers;
• AudioScience HPI driver;
• Amlogic Meson SoC drivers;
• USB sound devices;
• KVM core;
  (CVE-2024-49938, CVE-2024-41066, CVE-2024-57951, CVE-2024-56779,
  CVE-2024-50194, CVE-2024-50265, CVE-2024-56596, CVE-2024-57922,
  CVE-2024-56614, CVE-2024-57912, CVE-2024-50251, CVE-2024-56569,
  CVE-2024-56587, CVE-2024-57807, CVE-2024-50051, CVE-2024-49997,
  CVE-2024-57911, CVE-2024-50195, CVE-2024-50205, CVE-2024-35896,
  CVE-2025-21689, CVE-2024-43098, CVE-2024-47757, CVE-2025-21639,
  CVE-2024-57900, CVE-2024-56634, CVE-2024-50230, CVE-2024-57946,
  CVE-2024-53059, CVE-2024-50290, CVE-2024-49985, CVE-2024-50142,
  CVE-2024-49925, CVE-2024-50199, CVE-2024-47699, CVE-2024-53172,
  CVE-2024-53173, CVE-2024-56631, CVE-2024-57938, CVE-2024-53101,
  CVE-2024-53197, CVE-2024-49896, CVE-2024-47697, CVE-2024-56644,
  CVE-2024-50236, CVE-2024-46731, CVE-2024-47674, CVE-2024-38544,
  CVE-2024-46853, CVE-2024-47740, CVE-2024-53121, CVE-2024-50082,
  CVE-2024-53165, CVE-2024-50040, CVE-2024-57929, CVE-2024-57889,
  CVE-2024-49860, CVE-2024-50287, CVE-2022-49034, CVE-2024-56690,
  CVE-2024-50302, CVE-2024-50006, CVE-2024-49949, CVE-2024-49868,
  CVE-2024-49903, CVE-2024-47723, CVE-2024-49936, CVE-2024-49955,
  CVE-2024-50234, CVE-2024-50301, CVE-2024-47670, CVE-2024-56574,
  CVE-2024-50168, CVE-2024-57913, CVE-2024-56602, CVE-2024-56630,
  CVE-2024-53130, CVE-2024-53145, CVE-2024-56642, CVE-2024-50202,
  CVE-2024-38588, CVE-2024-56767, CVE-2024-50024, CVE-2024-53198,
  CVE-2024-56548, CVE-2024-50184, CVE-2024-47756, CVE-2024-50167,
  CVE-2025-21694, CVE-2024-53063, CVE-2024-49966, CVE-2024-50299,
  CVE-2024-50143, CVE-2024-49924, CVE-2024-53061, CVE-2024-53124,
  CVE-2024-49902, CVE-2024-56739, CVE-2024-49952, CVE-2025-21664,
  CVE-2024-49877, CVE-2024-47701, CVE-2024-52332, CVE-2024-49975,
  CVE-2024-56645, CVE-2024-53140, CVE-2024-49948, CVE-2024-56724,
  CVE-2024-49963, CVE-2025-21687, CVE-2024-47698, CVE-2024-50039,
  CVE-2024-56595, CVE-2024-50282, CVE-2023-52458, CVE-2024-56615,
  CVE-2024-40965, CVE-2024-49965, CVE-2024-53112, CVE-2024-53135,
  CVE-2024-56601, CVE-2024-56532, CVE-2024-53184, CVE-2024-47672,
  CVE-2024-53155, CVE-2024-50171, CVE-2024-50035, CVE-2024-56704,
  CVE-2024-53156, CVE-2024-47685, CVE-2024-50044, CVE-2024-47712,
  CVE-2024-47707, CVE-2024-50179, CVE-2024-56594, CVE-2024-56688,
  CVE-2024-50151, CVE-2025-21699, CVE-2024-56598, CVE-2024-47737,
  CVE-2024-57849, CVE-2024-56576, CVE-2025-21638, CVE-2024-53181,
  CVE-2024-50033, CVE-2024-49995, CVE-2024-56756, CVE-2024-49867,
  CVE-2025-21697, CVE-2024-56600, CVE-2024-56670, CVE-2024-47713,
  CVE-2024-46854, CVE-2024-47671, CVE-2024-53680, CVE-2024-49851,
  CVE-2024-49883, CVE-2024-56780, CVE-2024-56770, CVE-2024-56650,
  CVE-2024-53146, CVE-2024-50218, CVE-2024-56531, CVE-2024-47706,
  CVE-2024-56572, CVE-2024-47709, CVE-2024-49958, CVE-2024-57948,
  CVE-2024-40911, CVE-2024-57904, CVE-2024-56769, CVE-2024-35887,
  CVE-2025-21678, CVE-2024-57802, CVE-2024-56700, CVE-2024-43900,
  CVE-2024-47747, CVE-2024-50059, CVE-2024-56606, CVE-2024-53161,
  CVE-2024-50116, CVE-2024-50180, CVE-2024-50127, CVE-2024-53131,
  CVE-2024-53157, CVE-2024-50279, CVE-2024-57850, CVE-2024-56619,
  CVE-2024-49982, CVE-2024-56748, CVE-2024-53104, CVE-2024-49981,
  CVE-2024-56643, CVE-2024-49962, CVE-2024-50131, CVE-2024-56781,
  CVE-2024-50233, CVE-2024-56597, CVE-2024-56567, CVE-2024-57902,
  CVE-2024-43863, CVE-2024-56581, CVE-2024-53171, CVE-2024-56633,
  CVE-2024-50296, CVE-2024-49879, CVE-2024-56593, CVE-2024-47679,
  CVE-2024-53148, CVE-2024-50237, CVE-2024-49959, CVE-2024-50269,
  CVE-2024-53138, CVE-2024-49957, CVE-2024-50278, CVE-2024-49894,
  CVE-2024-49900, CVE-2024-56586, CVE-2024-50148, CVE-2024-50262,
  CVE-2024-56720, CVE-2024-50096, CVE-2024-57931, CVE-2024-56681,
  CVE-2021-47219, CVE-2025-21640, CVE-2024-56603, CVE-2024-50229,
  CVE-2024-53174, CVE-2024-50007, CVE-2024-49944, CVE-2024-50273,
  CVE-2024-49878, CVE-2024-56605, CVE-2024-53150, CVE-2024-44931,
  CVE-2024-53214, CVE-2024-49882, CVE-2024-53158, CVE-2024-55916,
  CVE-2024-50117, CVE-2024-56570, CVE-2024-44938, CVE-2024-53239,
  CVE-2024-53217, CVE-2024-50099, CVE-2024-50267, CVE-2024-56562,
  CVE-2024-40953, CVE-2024-57884, CVE-2024-49892, CVE-2024-56659,
  CVE-2024-56746, CVE-2024-50074, CVE-2024-41016, CVE-2024-53142,
  CVE-2024-57901, CVE-2024-56637, CVE-2024-47710, CVE-2024-46849,
  CVE-2024-57910, CVE-2024-47692, CVE-2024-48881, CVE-2024-53194,
  CVE-2024-56558, CVE-2024-56747, CVE-2024-56629, CVE-2024-47696,
  CVE-2024-56691, CVE-2024-53227, CVE-2024-57908, CVE-2024-57892,
  CVE-2024-53183, CVE-2024-56723, CVE-2024-42252, CVE-2024-57890,
  CVE-2024-50134, CVE-2024-56694, CVE-2024-57906, CVE-2024-56539,
  CVE-2024-53690, CVE-2024-53066, CVE-2024-49973, CVE-2024-47684,
  CVE-2024-50045, CVE-2024-49884, CVE-2025-21653, CVE-2024-47749,
  CVE-2024-47742, CVE-2024-50008, CVE-2024-50150, CVE-2024-53127,
  CVE-2024-49996)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.04

• linux-image-5.4.0-1116-fips - 5.4.0-1116.126
• linux-image-fips - 5.4.0.1116.113

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

• CVE-2024-50006
• CVE-2024-50040
• CVE-2024-50096
• CVE-2024-49963
• CVE-2024-56633
• CVE-2024-50299
• CVE-2024-56724
• CVE-2024-50171
• CVE-2024-35887
• CVE-2024-57951
• CVE-2024-38544
• CVE-2025-21653
• CVE-2024-49962
• CVE-2024-47747
• CVE-2024-47740
• CVE-2024-47723
• CVE-2024-50008
• CVE-2024-50194
• CVE-2024-50202
• CVE-2024-50230
• CVE-2024-49860
• CVE-2024-53145
• CVE-2024-49884
• CVE-2024-50236
• CVE-2024-56562
• CVE-2024-49975
• CVE-2024-53183
• CVE-2024-56601
• CVE-2024-56602
• CVE-2024-56700
• CVE-2024-50148
• CVE-2024-53142
• CVE-2024-50151
• CVE-2024-50269
• CVE-2024-56670
• CVE-2024-56747
• CVE-2024-57901
• CVE-2025-21664
• CVE-2024-38588
• CVE-2024-47757
• CVE-2024-53148
• CVE-2025-21639
• CVE-2024-56619
• CVE-2024-48881
• CVE-2024-49965
• CVE-2024-50142
• CVE-2024-56586
• CVE-2024-40953
• CVE-2024-49882
• CVE-2024-53131
• CVE-2024-56593
• CVE-2024-46854
• CVE-2024-47713
• CVE-2024-49924
• CVE-2024-50229
• CVE-2025-21697
• CVE-2024-50287
• CVE-2024-42252
• CVE-2024-56681
• CVE-2024-57892
• CVE-2024-56780
• CVE-2024-50205
• CVE-2024-50262
• CVE-2024-49851
• CVE-2024-43098
• CVE-2024-53066
• CVE-2024-56574
• CVE-2024-49877
• CVE-2024-50045
• CVE-2025-21687
• CVE-2024-56581
• CVE-2024-49894
• CVE-2024-47742
• CVE-2024-56779
• CVE-2024-46853
• CVE-2024-57900
• CVE-2024-49867
• CVE-2024-50278
• CVE-2024-53146
• CVE-2024-47685
• CVE-2024-41066
• CVE-2024-56569
• CVE-2024-50051
• CVE-2024-53112
• CVE-2024-47671
• CVE-2024-57946
• CVE-2024-56659
• CVE-2024-57884
• CVE-2024-57849
• CVE-2024-50134
• CVE-2024-50199
• CVE-2024-53104
• CVE-2024-50044
• CVE-2024-53155
• CVE-2024-53157
• CVE-2024-57910
• CVE-2024-53172
• CVE-2024-56598
• CVE-2024-53173
• CVE-2024-56548
• CVE-2024-56600
• CVE-2024-56645
• CVE-2024-44931
• CVE-2024-53121
• CVE-2024-50024
• CVE-2024-57922
• CVE-2024-53198
• CVE-2024-50234
• CVE-2024-53150
• CVE-2024-53130
• CVE-2024-56587
• CVE-2024-49883
• CVE-2023-52458
• CVE-2024-41016
• CVE-2024-49996
• CVE-2024-53140
• CVE-2024-49892
• CVE-2024-50282
• CVE-2024-56570
• CVE-2024-56603
• CVE-2024-56637
• CVE-2024-53124
• CVE-2024-56770
• CVE-2024-56644
• CVE-2024-49985
• CVE-2024-50117
• CVE-2024-53214
• CVE-2024-47670
• CVE-2024-47696
• CVE-2024-50301
• CVE-2024-55916
• CVE-2025-21678
• CVE-2024-50296
• CVE-2024-53059
• CVE-2024-50033
• CVE-2024-49903
• CVE-2024-56688
• CVE-2024-49896
• CVE-2024-57906
• CVE-2024-56576
• CVE-2024-50007
• CVE-2024-49973
• CVE-2024-50167
• CVE-2024-49957
• CVE-2024-56567
• CVE-2024-57889
• CVE-2024-23848
• CVE-2024-49936
• CVE-2024-49995
• CVE-2024-50237
• CVE-2024-57938
• CVE-2024-40911
• CVE-2024-50251
• CVE-2024-44938
• CVE-2024-53063
• CVE-2024-53680
• CVE-2024-56630
• CVE-2024-49925
• CVE-2024-49958
• CVE-2024-50180
• CVE-2024-56532
• CVE-2024-56723
• CVE-2024-57931
• CVE-2024-50273
• CVE-2024-50082
• CVE-2024-56606
• CVE-2024-49944
• CVE-2024-57913
• CVE-2024-49902
• CVE-2024-53061
• CVE-2024-47697
• CVE-2024-50116
• CVE-2024-49952
• CVE-2024-56720
• CVE-2024-56596
• CVE-2024-53690
• CVE-2024-49868
• CVE-2024-47712
• CVE-2024-53171
• CVE-2024-56739
• CVE-2025-21640
• CVE-2024-52332
• CVE-2024-49948
• CVE-2024-47684
• CVE-2024-50099
• CVE-2024-47674
• CVE-2024-56631
• CVE-2024-56746
• CVE-2024-56748
• CVE-2024-56781
• CVE-2024-50039
• CVE-2024-50267
• CVE-2024-50218
• CVE-2024-47698
• CVE-2024-56643
• CVE-2024-53194
• CVE-2024-47699
• CVE-2024-53127
• CVE-2024-47709
• CVE-2024-53217
• CVE-2024-49982
• CVE-2022-49034
• CVE-2024-49900
• CVE-2025-21638
• CVE-2024-49997
• CVE-2024-53156
• CVE-2024-57902
• CVE-2024-56690
• CVE-2024-49878
• CVE-2024-57912
• CVE-2024-50179
• CVE-2024-50074
• CVE-2024-57929
• CVE-2024-47707
• CVE-2024-47710
• CVE-2024-43900
• CVE-2024-50195
• CVE-2024-47692
• CVE-2024-49938
• CVE-2024-50290
• CVE-2024-47749
• CVE-2024-56595
• CVE-2024-56614
• CVE-2024-56650
• CVE-2024-57850
• CVE-2024-50131
• CVE-2024-50143
• CVE-2024-46849
• CVE-2024-53174
• CVE-2024-56769
• CVE-2024-35896
• CVE-2024-50233
• CVE-2024-46731
• CVE-2024-56694
• CVE-2024-56704
• CVE-2024-53181
• CVE-2024-50127
• CVE-2024-53184
• CVE-2024-53197
• CVE-2024-50150
• CVE-2024-50302
• CVE-2024-49959
• CVE-2021-47219
• CVE-2024-57948
• CVE-2025-0927
• CVE-2024-49966
• CVE-2024-56634
• CVE-2024-47756
• CVE-2024-53135
• CVE-2024-56539
• CVE-2024-47737
• CVE-2024-53165
• CVE-2024-56691
• CVE-2024-47706
• CVE-2024-56594
• CVE-2024-56531
• CVE-2024-43863
• CVE-2024-47701
• CVE-2024-49981
• CVE-2024-56558
• CVE-2025-21694
• CVE-2024-57890
• CVE-2024-50265
• CVE-2024-53158
• CVE-2024-53239
• CVE-2024-57904
• CVE-2024-56756
• CVE-2024-57802
• CVE-2024-57911
• CVE-2024-50184
• CVE-2025-21689
• CVE-2024-56597
• CVE-2024-50168
• CVE-2024-56615
• CVE-2024-49955
• CVE-2024-56629
• CVE-2024-53138
• CVE-2024-47679
• CVE-2024-50059
• CVE-2024-53161
• CVE-2024-56572
• CVE-2024-56642
• CVE-2024-56767
• CVE-2024-40965
• CVE-2024-49949
• CVE-2024-53227
• CVE-2024-56605
• CVE-2024-50035
• CVE-2024-47672
• CVE-2024-57807
• CVE-2024-53101
• CVE-2024-49879
• CVE-2025-21699
• CVE-2024-50279
• CVE-2024-57908

Related notices

• USN-7166-1
• USN-7166-2
• USN-7166-3
• USN-7186-1
• USN-7186-2
• USN-7194-1
• USN-7166-4
• USN-7276-1
• USN-7277-1
• USN-7294-1
• USN-7293-1
• USN-7295-1
• USN-7301-1
• USN-7304-1
• USN-7303-1
• USN-7294-2
• USN-7294-3
• USN-7303-2
• USN-7310-1
• USN-7311-1
• USN-7303-3
• USN-7294-4
• USN-7384-1
• USN-7385-1
• USN-7386-1
• USN-7383-1
• USN-7383-2
• USN-7379-1
• USN-7380-1
• USN-7381-1
• USN-7382-1
• USN-7387-1
• USN-7388-1
• USN-7387-3
• USN-7389-1
• USN-7390-1
• USN-7387-2
• USN-7391-1
• USN-7392-1
• USN-7392-2
• USN-7288-1
• USN-7289-1
• USN-7291-1
• USN-7288-2
• USN-7289-2
• USN-7289-3
• USN-7305-1
• USN-7308-1
• USN-7289-4
• USN-7331-1
• USN-7332-1
• USN-7342-1
• USN-7332-2
• USN-7344-1
• USN-7332-3
• USN-7344-2
• USN-6893-1
• USN-6893-2
• USN-6893-3
• USN-6918-1
• USN-6949-1
• USN-6952-1
• USN-6955-1
• USN-6949-2
• USN-7007-1
• USN-7009-1
• USN-7019-1
• USN-7007-2
• USN-7007-3
• USN-7009-2
• USN-6999-1
• USN-7004-1
• USN-7005-1
• USN-7005-2
• USN-7008-1
• USN-6999-2
• USN-7029-1
• USN-7154-1
• USN-7155-1
• USN-7156-1
• USN-7154-2
• USN-7196-1
• USN-7089-2
• USN-7089-1
• USN-7090-1
• USN-7089-3
• USN-7095-1
• USN-7089-4
• USN-7089-5
• USN-7089-6
• USN-7089-7
• USN-7233-1
• USN-7233-2
• USN-7233-3
• USN-7262-1
• USN-7262-2
• USN-7324-1
• USN-7325-1
• USN-7326-1
• USN-7325-2
• USN-7325-3
• LSN-0110-1
• USN-6688-1
• USN-6725-1
• USN-6725-2
• USN-6818-1
• USN-6819-1
• USN-6818-2
• USN-6819-2
• USN-6819-3
• USN-6818-3
• USN-6818-4
• USN-6819-4
• USN-7170-1
• USN-7333-1
• USN-6898-1
• USN-6898-2
• USN-6898-3
• USN-6898-4
• USN-6917-1
• USN-6919-1
• USN-6927-1
• USN-7100-1
• USN-7100-2
• USN-7123-1
• USN-7144-1
• USN-7296-1
• USN-7300-1
• USN-7298-1
• USN-7323-1
• USN-7328-1
• USN-7329-1
• USN-7323-2
• USN-7328-2
• USN-7328-3