USN-7597-2

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - x86 architecture; - ACPI drivers; - Clock framework and drivers; - GPU drivers; - HID subsystem; - InfiniBand drivers; - Media drivers; - MemoryStick subsystem; - Network drivers; - Mellanox network drivers; - NTB driver; - PCI subsystem; - Voltage and Current Regulator drivers; - Remote Processor subsystem; - SCSI subsystem; - QCOM SoC drivers; - Thermal drivers; - BTRFS file system; - Ext4 file system; - JFS file system; - Network file system (NFS) server daemon; - NTFS3 file system; - File systems infrastructure; - Proc file system; - SMB network file system; - IPv6 networking; - RDMA verbs API; - SoC audio core drivers; - Tracing infrastructure; - Watch queue notification mechanism; - 802.1Q VLAN protocol; - Asynchronous Transfer Mode (ATM) subsystem; - Bluetooth subsystem; - Networking core; - IPv4 networking; - Netfilter; - Network traffic control; - SMC sockets; - SoC Audio for Freescale CPUs drivers; (CVE-2025-21994, CVE-2025-37937, CVE-2025-21964, CVE-2025-22086, CVE-2025-22073, CVE-2025-39735, CVE-2025-22025, CVE-2025-22004, CVE-2025-22055, CVE-2025-22007, CVE-2024-53144, CVE-2025-22044, CVE-2025-22014, CVE-2025-37785, CVE-2025-21959, CVE-2022-49636, CVE-2025-21968, CVE-2025-22018, CVE-2025-22035, CVE-2024-56664, CVE-2025-21975, CVE-2025-39728, CVE-2025-22045, CVE-2022-49728, CVE-2025-21962, CVE-2025-22089, CVE-2025-21963, CVE-2025-21956, CVE-2024-36945, CVE-2025-21992, CVE-2025-22010, CVE-2025-21991, CVE-2024-46812, CVE-2024-42230, CVE-2025-21941, CVE-2025-22071, CVE-2025-22020, CVE-2025-22097, CVE-2025-21999, CVE-2025-21957, CVE-2025-22063, CVE-2024-58093, CVE-2025-21970, CVE-2025-22005, CVE-2025-22021, CVE-2025-22075, CVE-2025-22050, CVE-2025-21981, CVE-2025-22054, CVE-2025-38152, CVE-2025-38575, CVE-2025-38637, CVE-2023-53034, CVE-2025-22056, CVE-2025-22008, CVE-2024-46821, CVE-2025-23138, CVE-2024-46753, CVE-2025-37889, CVE-2025-22081, CVE-2025-21996, CVE-2025-22066, CVE-2025-22060, CVE-2025-23136, CVE-2025-22079)

References

Affected packages

Ubuntu:Pro:FIPS-updates:22.04:LTS / linux-azure-fips

Package

Name: linux-azure-fips
Purl: pkg:deb/ubuntu/linux-azure-fips@5.15.0-1091.100+fips1?arch=source&distro=fips-updates/jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1091.100+fips1

Affected versions

5.*

5.15.0-1053.61+fips1

5.15.0-1058.66+fips1

5.15.0-1059.67+fips1

5.15.0-1060.69+fips1

5.15.0-1061.70+fips1

5.15.0-1063.72+fips1

5.15.0-1064.73+fips1

5.15.0-1065.74+fips1

5.15.0-1067.76+fips1

5.15.0-1068.77+fips1

5.15.0-1070.79+fips1

5.15.0-1071.80+fips1

5.15.0-1072.81+fips1

5.15.0-1073.82+fips1

5.15.0-1074.83+fips1

5.15.0-1075.84+fips1

5.15.0-1078.87+fips1

5.15.0-1079.88+fips1

5.15.0-1080.89+fips1

5.15.0-1082.91+fips1

5.15.0-1083.92+fips1

5.15.0-1085.94+fips1

5.15.0-1087.96+fips1

5.15.0-1088.97+fips1

5.15.0-1089.98+fips1

5.15.0-1090.99+fips1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-azure-fips-cloud-tools-5.15.0-1091"
        },
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-azure-fips-headers-5.15.0-1091"
        },
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-azure-fips-tools-5.15.0-1091"
        },
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-buildinfo-5.15.0-1091-azure-fips"
        },
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-cloud-tools-5.15.0-1091-azure-fips"
        },
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-headers-5.15.0-1091-azure-fips"
        },
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-image-unsigned-5.15.0-1091-azure-fips"
        },
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-image-unsigned-5.15.0-1091-azure-fips-dbgsym"
        },
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1091-azure-fips"
        },
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-modules-5.15.0-1091-azure-fips"
        },
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-modules-extra-5.15.0-1091-azure-fips"
        },
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-modules-involflt-5.15.0-1091-azure-fips"
        },
        {
            "binary_version": "5.15.0-1091.100+fips1",
            "binary_name": "linux-tools-5.15.0-1091-azure-fips"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}