Ubuntu patches multiple Linux kernel flaws in USN-9022-1
The update covers USB, networking, memory management, several CPU architectures and other kernel subsystems, with no exploitation stated.
Stories per day · 30 days
17 RSS
Relatedubuntu21denial-of-service6linux-kernel6canonical3remote-code-execution3aws-sigv42curl2php2a2dp1access-control1advisory1apache1azure1bluetooth1bluez1brotli1certificate-validation1code-execution1
116 stories, newest first · one card per story
Stories tagged #usn
Ubuntu fixes Fetchmail denial-of-service flaws in USN-9013-1
Two named issues can crash Fetchmail on Ubuntu 16.04, 18.04 and 20.04 LTS; the notice snippet cuts off a third finding.
Ubuntu fixes Linux kernel SCSI and NFS client flaws
USN-8964-1 addresses CVE-2022-49082 and CVE-2025-39730; Ubuntu says an attacker could possibly compromise the system.
Ubuntu: Brotli mishandles streams, enabling possible DoS or code execution
USN-8956-1 says a remote attacker could abuse malformed compressed streams; no CVE, versions, or exploitation status are given.
Ubuntu warns of zlib heap overflow in non-blocking writes
Ali Firas found mishandled writes that can crash zlib or allow arbitrary code execution.
USN-8948-2 backports PHP code-execution fixes to older Ubuntu
CVE-2026-109618 and CVE-2026-109619 can let a remote attacker run code while PHP handles requests.
Ubuntu fixes Ghostscript code-execution flaws
Crafted PostScript or font files could bypass the sandbox or crash Ghostscript.
Ubuntu: PHP request-handling bugs allow remote code execution
One bug mishandles out-of-memory cleanup; the other reuses internal request state across PHP workers.
Ubuntu ships .NET security updates in USN-8942-1
.NET 8, 10, and 11 move to 8.0.32, 10.0.13, and 11.0.0~rc2 on the listed Ubuntu releases.
USN-8922-2: Linux kernel (Azure) vulnerabilities
Ubuntu patched multiple Azure Linux kernel flaws that could let an attacker compromise the system.
USN-8883-2: Go vulnerability
Ubuntu fixes a Go 1.23 x/net/idna Punycode flaw that could bypass hostname access controls.
USN-8932-1: curl vulnerabilities
Ubuntu patched curl flaws that could leak AWS SigV4 state or proxy credentials.
USN-8931-1: Apache HTTP Server vulnerabilities
Ubuntu patched Apache HTTP Server flaws that may leak data, misroute proxy requests, or allow denial of service or code execution.
USN-8927-1: curl vulnerabilities
Ubuntu’s USN-8927-1 patches curl flaws that may leak data or reuse the wrong network interface.
USN-8926-1: urllib3 vulnerabilities
Ubuntu fixes three urllib3 flaws, including certificate validation bypass and denial-of-service bugs.
USN-8925-1: YAML-LibYAML vulnerabilities
Ubuntu patched YAML-LibYAML flaws that could delete files or run code on 16.04 and 18.04 LTS.
USN-8908-2: BlueZ regression
Ubuntu's USN-8908-2 fixes a BlueZ A2DP regression that stopped Bluetooth audio devices from reconnecting automatically.
USN-8924-1: Linux kernel vulnerabilities
Ubuntu patches old Linux kernel flaws that leak PIDs or crash via malicious XFS and f2fs images.
USN-8915-1: FFmpeg vulnerabilities
Ubuntu's USN-8915-1 fixes FFmpeg flaws, including possible code execution and several denial-of-service bugs.
USN-8914-1: Google Guest Agent, Google OS Config Agent vulnerability
Ubuntu USN-8914-1 patches Punycode handling in Google Guest Agent and OS Config Agent that allowed hostname access-control bypass and privilege escalation.
USN-8913-1: libx11 vulnerabilities
Ubuntu patched libX11 flaws that let a malicious X server crash clients or possibly run code.
USN-8912-1: Perl DBI module vulnerabilities
Ubuntu's USN-8912-1 patches Perl DBI flaws that may allow code execution or denial of service.
USN-8911-1: Linux kernel (OEM) vulnerabilities
Ubuntu patched multiple Linux kernel OEM flaws that could let attackers compromise affected systems.
USN-8887-3: Linux kernel vulnerabilities
Ubuntu patched Linux kernel flaws, including AMD SEV-SNP issue CVE-2023-20585.