UbuntuUpdates.org

Bugs fixes in "linux-hwe-7.0"

Origin Bug number Title Date fixed
CVE CVE-2026-72322 In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed work A race condition exists betw 2026-09-10
CVE CVE-2026-72320 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_lookup: fix catchall element handling with inverted lookups nft_ 2026-09-10
CVE CVE-2026-72319 In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out th 2026-09-10
CVE CVE-2026-72318 In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parse_dfs_referrals() validates that 2026-09-10
CVE CVE-2026-72317 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connect_worker The TLS connect path h 2026-09-10
CVE CVE-2026-72299 In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipc_sk_enqueue() runs 2026-09-10
CVE CVE-2026-72296 In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife_decode() ife decode may return 2026-09-10
CVE CVE-2026-72289 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Check the interrupt is still ours before migrating it vgic_pr 2026-09-10
CVE CVE-2026-72288 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disablin 2026-09-10
CVE CVE-2026-72279 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR KVM currently maps t 2026-09-10
CVE CVE-2026-72277 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory When constructing 2026-09-10
CVE CVE-2026-72251 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale data pointer quoting sashiko: --- 2026-09-10
CVE CVE-2026-72234 In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The pskb_may_p 2026-09-10
CVE CVE-2026-72226 In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contains the 2026-09-10
CVE CVE-2026-72222 In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback svc_tcp_han 2026-09-10
CVE CVE-2026-72221 In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callback when cancel loses race When w 2026-09-10
CVE CVE-2026-72220 In the Linux kernel, the following vulnerability has been resolved: sunrpc: harden rq_procinfo lifecycle to prevent double-free The svc_release_rqs 2026-09-10
CVE CVE-2026-72217 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing xdr_buf_to_bvec() w 2026-09-10
CVE CVE-2026-72194 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow indx_fi 2026-09-10
CVE CVE-2026-72192 In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head indx_inser 2026-09-10



About   -   Send Feedback to @ubuntu_updates