UbuntuUpdates.org

Bugs addressed in recent updates

All Launchpad Ubuntu Debian CVE

Origin Bug number Title Packages
Launchpad 2136605 Enable CONFIG_DRM_SIMPLEDRM for IGX Thor linux-nvidia-tegra
Launchpad 2136282 NVIDIA k6.8 patches Dec 15, 2025 linux-nvidia-tegra
CVE CVE-2025-3360 A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_fro glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0
CVE CVE-2025-7039 A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potenti glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0
CVE CVE-2025-6052 A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input ca glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0
CVE CVE-2025-14087 A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potenti glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0
CVE CVE-2025-13601 A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0 glib2.0
Launchpad 2133923 Linux-firmware: Add qualcomm serial engine firmware qupv3fw.elf linux-firmware
Launchpad 2133787 Support Qualcomm RB4 graphics firmware linux-firmware linux-firmware
Launchpad 2131936 Update aic100 fw for power issues linux-firmware linux-firmware
Launchpad 2133664 Add TI tas2781 support for HP platforms linux-firmware linux-firmware
Launchpad 2130381 [SRU][R/Q/N] mt7925: Support 802.11d and CQM events for roaming linux-firmware linux-firmware
Launchpad 2127969 [SRU] Upgrade Intel xe GUC to v70.49.4 for Intel Panther Lake linux-firmware linux-firmware
CVE CVE-2025-66287 A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk
CVE CVE-2025-43458 This issue was addressed through improved state management. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26. webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk
CVE CVE-2025-43421 Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26. webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk
CVE CVE-2025-13947 A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk
Launchpad 2136734 selftests: net: veth: fix compatibility with older ethtool versions linux linux
CVE CVE-2025-38535 In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode When transi linux
CVE CVE-2025-38497 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writing an empty linux



About   -   Send Feedback to @ubuntu_updates