Ubuntu fixes Linux kernel SCSI and NFS client flaws
Original title: USN-8964-1: Linux kernel vulnerabilities
USN-8964-1 addresses CVE-2022-49082 and CVE-2025-39730; Ubuntu says an attacker could possibly compromise the system.
Ubuntu published USN-8964-1 for Linux kernel flaws in the SCSI subsystem and the NFS client. The notice says an attacker could possibly use the issues to compromise the system. The update corrects the flaws; the snippet does not name affected releases or fixed package versions.
Unconfirmed: Affected Ubuntu releases, fixed versions, and exploitation status are not stated in the snippet.
- Named CVEs are CVE-2022-49082 and CVE-2025-39730.
- Corrected subsystems are SCSI and the NFS client.
- The snippet does not state whether the flaws are exploited.
Impact: Possible compromise of the system
| Product | Affected |
|---|---|
| Ubuntu Linux kernel | — |
- 1.Install the Ubuntu kernel update from USN-8964-1.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-49082 | Linux kernel: scsi: mpt3sas | 7.8 | <1% | ||
| CVE-2025-39730 | Linux kernel: NFS | 7.8 | <1% |
From the original article
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - Network file system (NFS) client; (CVE-2022-49082, CVE-2025-39730)
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.